CWE-79
MITRE ↗Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)
A vulnerability classified as problematic has been found in CodeAstro University Management System 1.0. Affected is an u
A vulnerability classified as problematic was found in CodeAstro University Management System 1.0. Affected by this vuln
A vulnerability has been found in SourceCodester Product Management System 1.0 and classified as problematic. This vulne
Concrete CMS version 9 before 9.2.5 is vulnerable to stored XSS in file tags and description attributes since administra
A vulnerability, which was classified as problematic, has been found in Bdtask Bhojon Best Restaurant Management Softwar
A vulnerability classified as problematic has been found in PHPGurukul Tourism Management System 1.0. Affected is an unk
Concrete CMS before 9.2.3 allows Stored XSS on the Admin Dashboard via /dashboard/system/basics/name. (8.5 and earlier a
A vulnerability, which was classified as problematic, was found in SourceCodester Petrol Pump Management Software 1.0. A
A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This a
A vulnerability, which was classified as problematic, was found in Bdtask Isshue Multi Store eCommerce Shopping Cart Sol
A vulnerability was found in Bdtask Hospita AutoManager up to 20240223 and classified as problematic. This issue affects
A vulnerability, which was classified as problematic, has been found in Bdtask G-Prescription Gynaecology & OBS Consulta
A vulnerability, which was classified as problematic, was found in Bdtask G-Prescription Gynaecology & OBS Consultation
A vulnerability has been found in Bdtask G-Prescription Gynaecology & OBS Consultation Software 1.0 and classified as pr
A vulnerability was found in EVE-NG 5.0.1-13 and classified as problematic. Affected by this issue is some unknown funct
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been classified as pr
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been declared as prob
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been rated as problem
A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as problematic. This issue
A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as problematic. Af
A vulnerability classified as problematic was found in Zebra ZTC GK420d 1.0. This vulnerability affects unknown code of
A vulnerability has been found in Clavister E10 and E80 up to 14.00.10 and classified as problematic. This vulnerability
A vulnerability was found in Emlog Pro 2.2.10. It has been declared as problematic. This vulnerability affects unknown c
A vulnerability was found in Emlog Pro 2.2.10. It has been rated as problematic. This issue affects some unknown process
A vulnerability, which was classified as problematic, has been found in slowlyo OwlAdmin up to 3.5.7. Affected by this i
TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the ssid parameter in
A vulnerability was found in Techkshetra Info Solutions Savsoft Quiz 6.0 and classified as problematic. Affected by this
A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as problematic. Affected
A vulnerability classified as problematic has been found in PHPGurukul Directory Management System 1.0. Affected is an u
A vulnerability classified as problematic was found in PHPGurukul Directory Management System 1.0. Affected by this vuln
A vulnerability was found in FastCMS up to 0.1.5 and classified as problematic. Affected by this issue is some unknown f
** DISPUTED ** A vulnerability was found in zzdevelop lenosp up to 20230831. It has been classified as problematic. This
A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of th
A vulnerability, which was classified as problematic, has been found in oretnom23 Online Car Wash Booking System 1.0. Th
Zoho ManageEngine ServiceDesk Plus versions below 14730, ServiceDesk Plus MSP below 14720 and SupportCenter Plus below 1
A vulnerability was found in Likeshop up to 2.5.7 and classified as problematic. This issue affects some unknown process
A vulnerability, which was classified as problematic, has been found in Ingenico Estate Manager 2023. This issue affects
A vulnerability, which was classified as problematic, has been found in PHPVibe 11.0.46. This issue affects some unknown
A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the
A vulnerability has been found in Zorlan SkyCaiji up to 2.8 and classified as problematic. Affected by this vulnerabilit
A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected b
A vulnerability, which was classified as problematic, was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. This affects an
A vulnerability classified as problematic was found in Ingenico Estate Manager 2023. Affected by this vulnerability is a
A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problema
A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0 and classified as problemati
A vulnerability classified as problematic has been found in formtools.org Form Tools 3.1.1. This affects an unknown part
A vulnerability classified as problematic was found in formtools.org Form Tools 3.1.1. This vulnerability affects unknow
A vulnerability was found in FastAdmin 1.5.0.20240328. It has been declared as problematic. This vulnerability affects u
A vulnerability has been found in PMWeb 7.2.00 and classified as problematic. Affected by this vulnerability is an unkno
A vulnerability, which was classified as problematic, was found in CodeAstro Online Railway Reservation System 1.0. Affe
Frequently Asked Questions
What is CWE-79?
CWE-79 (Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-79?
There are 53,037 CVE records associated with CWE-79 in our database. Of these, 560 are critical severity, 4909 are high severity, and 31199 are medium severity.
How can I protect against CWE-79 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-79 using AI-powered security agents.
Detect CWE-79 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of input during web page generation (cross-site scripting) vulnerabilities across your infrastructure.
Get Started