Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)

560
CRITICAL
4,909
HIGH
31,199
MEDIUM
2,399
LOW
39,637 CVEs · Page 119/793
7.1
CVE-2025-23509

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in siteheart HyperCom

7.1
CVE-2025-23535

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in martin_ziegert REA

7.1
CVE-2025-23548

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bilal TAS Responsi

7.1
CVE-2025-23578

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Custom

7.1
CVE-2025-23583

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Explara Explara Me

7.1
CVE-2025-23589

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in markugwuanyi Conte

7.1
CVE-2025-23592

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in animexxx dForms df

7.1
CVE-2025-23597

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sabareesha Rio Pho

7.1
CVE-2025-23601

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in patrice Tab My Con

7.1
CVE-2025-23602

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Europe Ecologie Le

7.1
CVE-2025-23603

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MohammadJafar Khaj

7.1
CVE-2025-23604

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maeve Lander Rezdy

7.1
CVE-2025-23605

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lampd Call To Acti

7.1
CVE-2025-23606

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sebkay Calendi cal

7.1
CVE-2025-23607

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Camoo Sarl CAMOO S

7.1
CVE-2025-23609

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Helle1 Tagesteller

7.1
CVE-2025-23610

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tehsmash Ultimate

7.1
CVE-2025-23611

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webhue WH Cache &

7.1
CVE-2025-23625

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in awcode Unique UX u

7.1
CVE-2025-23630

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Irshad A.Khan Cybe

7.1
CVE-2025-23631

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sarah Lewis Conten

7.1
CVE-2025-23643

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in a.ankit ReadMe Cre

7.1
CVE-2025-23672

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tenteeglobal Insta

7.1
CVE-2025-23674

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andygauk Bit.ly li

7.1
CVE-2025-23676

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shawfactor LH Emai

7.1
CVE-2025-23678

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Md Imranur Rahman

7.1
CVE-2025-23679

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Flourish Pixel FP

7.1
CVE-2025-23681

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tahminajannat REDI

7.1
CVE-2025-23682

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bhuvnesh Gupta Pre

7.1
CVE-2025-23683

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xdxdVSxdxd MACME m

7.1
CVE-2025-23686

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phpdevca Admin Men

7.1
CVE-2025-23695

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kinlane CtyGrid Hy

7.1
CVE-2025-23696

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronan Mockett Stag

7.1
CVE-2025-23697

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webdeal Podčlánkov

7.1
CVE-2025-23700

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonisink yCyclista

7.1
CVE-2025-23701

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in limesquare Lime De

7.1
CVE-2025-23706

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in milordk Jet Skinne

7.1
CVE-2025-23709

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kiroro Formatted p

7.1
CVE-2025-23732

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in franciscopalacios

7.1
CVE-2025-23746

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Edem CMC MIGRATE c

7.1
CVE-2025-23758

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pootlepress Pootle

7.1
CVE-2025-23768

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in inwavethemes InFun

7.1
CVE-2025-23769

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dreamsofmatter Con

7.1
CVE-2025-23770

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Caspie Fast Tube f

7.1
CVE-2025-23798

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ElbowRobo Mass Mes

7.1
CVE-2025-23811

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ghasemy14 WP2APP w

7.1
CVE-2025-23812

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Jeffrey Cont

7.1
CVE-2025-23846

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thaikolja Flexible

7.1
CVE-2025-23866

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E. Marten EU DSGVO

7.1
CVE-2025-23867

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in markcoker WordPres

Frequently Asked Questions

What is CWE-79?

CWE-79 (Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.

How many CVEs are classified as CWE-79?

There are 53,037 CVE records associated with CWE-79 in our database. Of these, 560 are critical severity, 4909 are high severity, and 31199 are medium severity.

How can I protect against CWE-79 vulnerabilities?

Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-79 using AI-powered security agents.

Detect CWE-79 Vulnerabilities

CyberStrike's AI agents automatically detect improper neutralization of input during web page generation (cross-site scripting) vulnerabilities across your infrastructure.

Get Started