CWE-79
MITRE ↗Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)
A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as problematic. This iss
Kavita is a cross platform reading server. Opening an ebook with malicious scripts inside leads to code execution inside
A vulnerability classified as problematic was found in y_project RuoYi up to 4.7.9. Affected by this vulnerability is th
A vulnerability was found in ZKTeco BioTime up to 9.5.2. It has been classified as problematic. Affected is an unknown f
A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073
A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28. Affected is an unkno
Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and OpManager Enterprise Edition versions before 128104,
A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. Affecte
A vulnerability was found in ClassCMS 4.5. It has been declared as problematic. Affected by this vulnerability is an unk
A vulnerability has been found in SiYuan 3.1.0 and classified as problematic. Affected by this vulnerability is an unkno
A vulnerability was found in Xinhu RockOA 2.6.3 and classified as problematic. Affected by this issue is the function ok
A vulnerability, which was classified as problematic, has been found in ThinkSAAS 3.7.0. This issue affects some unknown
A vulnerability, which was classified as problematic, was found in ThinkSAAS 3.7.0. Affected is an unknown function of t
A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as problematic. Affected
A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. Affecte
In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page
Canarytokens help track activity and actions on a network. A Cross-Site Scripting vulnerability was identified in the "
A vulnerability classified as problematic has been found in SourceCodester Insurance Management System 1.0. This affects
A vulnerability, which was classified as problematic, has been found in SeaCMS 12.9/13.0. Affected by this issue is some
A vulnerability, which was classified as problematic, was found in SeaCMS 12.9. This affects an unknown part of the file
A vulnerability, which was classified as problematic, has been found in SourceCodester Complaints Report Management Syst
Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerabilit
A flaw has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected is an unknown function of t
A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This
A vulnerability, which was classified as problematic, was found in SourceCodester Lot Reservation Management System 1.0.
A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as problemat
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Bolt CMS 3.7.1. It has been rated as problematic. This issu
A vulnerability classified as problematic has been found in Bolt CMS 3.7.1. Affected is an unknown function of the file
A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as problematic. Thi
A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. This af
A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as problematic. This vuln
A vulnerability was found in Baidu UEditor 1.4.2. It has been declared as problematic. This vulnerability affects unknow
A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0. It has been rated as problematic.
A vulnerability has been found in SourceCodester Simple Realtime Quiz System 1.0 and classified as problematic. This vul
A vulnerability was found in SourceCodester Leads Manager Tool 1.0. It has been classified as problematic. This affects
A vulnerability classified as problematic was found in Gila CMS 1.10.9. This vulnerability affects unknown code of the f
A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vu
A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problemati
A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as problematic.
A vulnerability classified as problematic has been found in SourceCodester Kortex Lite Advocate Office Management System
A vulnerability classified as problematic was found in SourceCodester Kortex Lite Advocate Office Management System 1.0.
A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Manag
A vulnerability, which was classified as problematic, was found in SourceCodester Kortex Lite Advocate Office Management
A vulnerability, which was classified as problematic, was found in FastCMS up to 0.1.5. Affected is an unknown function
A vulnerability, which was classified as problematic, was found in SourceCodester Accounts Manager App 1.0. Affected is
A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as problematic
A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been declared as problematic. Affected by
A vulnerability classified as problematic was found in SourceCodester Best House Rental Management System 1.0. This vuln
A vulnerability has been found in SourceCodester Online Graduate Tracer System 1.0 and classified as problematic. Affect
A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as problematic. This issue
Frequently Asked Questions
What is CWE-79?
CWE-79 (Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-79?
There are 53,037 CVE records associated with CWE-79 in our database. Of these, 560 are critical severity, 4909 are high severity, and 31199 are medium severity.
How can I protect against CWE-79 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-79 using AI-powered security agents.
Detect CWE-79 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of input during web page generation (cross-site scripting) vulnerabilities across your infrastructure.
Get Started