Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)

560
CRITICAL
4,909
HIGH
31,199
MEDIUM
2,399
LOW
39,637 CVEs · Page 292/793
7.1
CVE-2024-49636

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woracal Agile Vide

7.1
CVE-2024-49637

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Foxskav Bet WC 201

7.1
CVE-2024-49638

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ventureharbour Ris

7.1
CVE-2024-49639

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Edward Stoever Mon

7.1
CVE-2024-49640

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AmaderCode Lab ACL

7.1
CVE-2024-49641

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tidaweb Tida URL S

7.1
CVE-2024-49643

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fifthsegment White

7.1
CVE-2024-49645

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ilias Gomatos Affi

7.1
CVE-2024-47640

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP ERP erp

7.1
CVE-2024-49632

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Senthil Vel CWD 3D

7.1
CVE-2024-49634

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rimon Habib BP Mem

7.1
CVE-2024-27524

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafte

7.1
CVE-2024-51989

Password Pusher is an open source application to communicate sensitive information over the web. A cross-site scripting

7.1
CVE-2024-51782

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sanjay Prasad Logi

7.1
CVE-2024-51783

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zaus Forms: 3rd-Pa

7.1
CVE-2024-51784

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VietFriend team Fr

7.1
CVE-2024-10676

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wojciechborowicz C

7.1
CVE-2024-51762

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Gipple Prope

7.1
CVE-2024-51763

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in biplob018 Team Sho

7.1
CVE-2024-51776

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sam Hotchkiss Dail

7.1
CVE-2024-51778

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tevya Satisfaction

7.1
CVE-2024-51779

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jason Coleman Don'

7.1
CVE-2024-51780

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eewee eewee admin

7.1
CVE-2024-51781

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stefan Backor Fire

7.1
CVE-2024-51707

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodin WP Visual

7.1
CVE-2024-51708

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Narnoo Narnoo Comm

7.1
CVE-2024-51709

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mariandz TeleAdmin

7.1
CVE-2024-51710

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Minerva Infotech R

7.1
CVE-2024-51711

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hitesh Khunt Sarag

7.1
CVE-2024-51712

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Visser Jig

7.1
CVE-2024-51713

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TRe Technology And

7.1
CVE-2024-51714

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in techdabang User Pa

7.1
CVE-2024-51716

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus Twitter r

7.1
CVE-2024-51717

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Perception System

7.1
CVE-2024-51718

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arsdehnel Simple M

7.1
CVE-2024-51719

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roman Peterhans Si

7.1
CVE-2024-51759

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Detlef Beyer SVT S

7.1
CVE-2024-51760

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ristretto Apps Das

7.1
CVE-2024-51761

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zackgilbert WPHelp

7.1
CVE-2024-51690

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in neelam.samariya Wp

7.1
CVE-2024-51691

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aryanduntley Admin

7.1
CVE-2024-51692

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in askewbrook Bing Se

7.1
CVE-2024-51693

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in labdav Search orde

7.1
CVE-2024-51694

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in digitalfisherman G

7.1
CVE-2024-51695

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yes We Work Fabric

7.1
CVE-2024-51696

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ben.moody Content

7.1
CVE-2024-51697

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofinder Doofinde

7.1
CVE-2024-51698

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Luis Rock Master B

7.1
CVE-2024-51699

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Buooy Buooy Sticky

7.1
CVE-2024-51701

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mahesh Waghmare MG

Frequently Asked Questions

What is CWE-79?

CWE-79 (Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.

How many CVEs are classified as CWE-79?

There are 53,037 CVE records associated with CWE-79 in our database. Of these, 560 are critical severity, 4909 are high severity, and 31199 are medium severity.

How can I protect against CWE-79 vulnerabilities?

Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-79 using AI-powered security agents.

Detect CWE-79 Vulnerabilities

CyberStrike's AI agents automatically detect improper neutralization of input during web page generation (cross-site scripting) vulnerabilities across your infrastructure.

Get Started