CWE-79
MITRE ↗Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)
The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some
The Form Maker by 10Web WordPress plugin before 1.15.31 does not sanitise and escape some of its settings, which could
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Fortin
Astro is a web framework. Starting in version 5.2.0 and prior to version 5.15.6, a Reflected Cross-Site Scripting (XSS)
Dell Update Manager Plugin, version(s) 1.5.0 through 1.6.0, contain(s) an Improper Neutralization of Script-Related HTML
SolarWinds Serv-U is vulnerable to a client-side cross-site scripting (XSS) vulnerability. The vulnerability can only be
A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is
A vulnerability was found in wangl1989 mysiteforme 1.0. It has been classified as problematic. This affects the function
A vulnerability, which was classified as problematic, was found in Trimble SPS851 488.01. This affects an unknown part o
A vulnerability has been found in code-projects Local Storage Todo App 1.0 and classified as problematic. This vulnerabi
A vulnerability was found in ZeroWdd studentmanager 1.0. It has been declared as problematic. This vulnerability affects
A vulnerability was found in ZeroWdd studentmanager 1.0. It has been rated as problematic. This issue affects the functi
A vulnerability was found in wander-chu SpringBoot-Blog 1.0 and classified as problematic. This issue affects the functi
A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been rated as problematic. Affected by this issue
A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function o
A vulnerability has been found in longpi1 warehouse 1.0 and classified as problematic. Affected by this vulnerability is
A vulnerability was found in StarSea99 starsea-mall 1.0. It has been rated as problematic. This issue affects some unkno
A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been declared as problematic. Affected by t
A vulnerability, which was classified as problematic, has been found in code-projects Car Rental Management System 1.0.
A vulnerability, which was classified as problematic, has been found in Campcodes School Management Software 1.0. This i
A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. Affected is
A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d and classified as problem
A vulnerability was found in Dcat-Admin 2.2.1-beta. It has been rated as problematic. This issue affects some unknown pr
A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown
A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as problematic. This vuln
A vulnerability has been found in FastCMS up to 0.1.5 and classified as problematic. This vulnerability affects unknown
A vulnerability was found in code-projects Blood Bank System 1.0 and classified as problematic. This issue affects some
A vulnerability, which was classified as problematic, has been found in otale tale up to 2.0.5. This issue affects the f
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affecte
A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affec
A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. It has been rated as problematic. This issue affects
A vulnerability classified as problematic has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected is an unknown
A vulnerability classified as problematic was found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this vulnerabil
A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part
A vulnerability classified as problematic was found in Mini-Tmall up to 20250211. This vulnerability affects unknown cod
A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as problematic. This issue affects some unknown p
A vulnerability was found in shishuocms 1.1. It has been classified as problematic. Affected is an unknown function of t
A vulnerability, which was classified as problematic, was found in huang-yk student-manage 1.0. This affects an unknown
A vulnerability was found in dayrui XunRuiCMS up to 4.6.3. It has been rated as problematic. This issue affects some unk
A vulnerability classified as problematic was found in ftcms 2.1. Affected by this vulnerability is an unknown functiona
A vulnerability, which was classified as problematic, has been found in Claro A7600-A1 RNR4-A72T-2x16_v2110403_CLA_32_16
A vulnerability classified as problematic has been found in aitangbao springboot-manager 3.0. This affects an unknown pa
A vulnerability classified as problematic was found in aitangbao springboot-manager 3.0. This vulnerability affects unkn
A vulnerability, which was classified as problematic, has been found in aitangbao springboot-manager 3.0. This issue aff
A vulnerability, which was classified as problematic, was found in aitangbao springboot-manager 3.0. Affected is an unkn
A vulnerability has been found in aitangbao springboot-manager 3.0 and classified as problematic. Affected by this vulne
A vulnerability was found in aitangbao springboot-manager 3.0 and classified as problematic. Affected by this issue is s
A vulnerability was found in Castlenet CBW383G2N up to 20250301. It has been classified as problematic. This affects an
A vulnerability was found in Castlenet CBW383G2N up to 20250301. It has been declared as problematic. This vulnerability
A vulnerability was found in otale Tale Blog 2.0.5. It has been declared as problematic. This vulnerability affects the
Frequently Asked Questions
What is CWE-79?
CWE-79 (Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-79?
There are 53,037 CVE records associated with CWE-79 in our database. Of these, 560 are critical severity, 4909 are high severity, and 31199 are medium severity.
How can I protect against CWE-79 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-79 using AI-powered security agents.
Detect CWE-79 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of input during web page generation (cross-site scripting) vulnerabilities across your infrastructure.
Get Started