CWE-79
MITRE ↗Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)
A vulnerability was determined in Bagisto up to 2.3.15. Affected by this vulnerability is an unknown functionality of th
The reCaptcha by WebDesignBy WordPress plugin before 2.0 does not sanitize or escape the Site Key setting before outputt
A vulnerability was found in projeto-siga siga 11.0.3.18. The affected element is an unknown function of the file /sigaw
A flaw has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /item.
A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unk
A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the func
A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. Impacted is the function editPage of the file app/
A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file sp
A vulnerability was found in vBulletin 6.x. This impacts an unknown function of the component Login. Performing a manipu
A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0. The impacted element is an
A vulnerability was detected in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. This
A vulnerability was identified in SourceCodester Student Grades Management System 1.0. Affected by this issue is some un
A vulnerability was found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16
A vulnerability was detected in Mettle sendportal up to 3.0.1. This affects an unknown part of the file /webview/ of the
A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability i
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is the function
A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function crea
A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This vulnerability affects the func
A security vulnerability has been detected in 1Panel-dev CordysCRM up to 1.4.1. This impacts the function Save of the fi
A weakness has been identified in SourceCodester Inventory System 1.0. Affected by this issue is some unknown functional
A vulnerability was detected in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. Affec
The Custom Block Builder WordPress plugin before 4.3.0 does not consistently check the unfiltered_html capability acros
The Store Locator WordPress plugin before 1.6.6 does not sanitize and escape one of its settings before storing it and o
A vulnerability was identified in CodeAstro Human Resource Management System 1.0. Affected by this issue is some unknown
A security flaw has been discovered in CodeAstro Human Resource Management System 1.0. This affects an unknown part of t
The Store Locator WordPress plugin before 1.6.9 does not sanitize and escape store logo metadata before storing it and o
HTML injection in pgAdmin 4's cloud deployment module. The verify_credentials, deploy, regions, and update-server endpoi
A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code o
A security flaw has been discovered in CodeAstro Complaint Management System 1.0. This issue affects some unknown proces
A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unknown function of the f
A security vulnerability has been detected in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. This a
A weakness has been identified in crater-invoice-inc crater up to 6.0.6. This affects the function getFormattedString of
A vulnerability was identified in NousResearch hermes-agent up to 2026.5.29.2. Affected by this issue is the function Ma
In JetBrains YouTrack before 2026.2.17394 stored XSS via article titles in digest emails was possible
A vulnerability was detected in Akpali9 Attendance-Management-System up to 70b91fe38f4195b701a45f0edcd4f42d5f64aeee. Thi
A weakness has been identified in vnotex vnote up to 3.20.1. Impacted is an unknown function of the file /src/data/extra
A security vulnerability has been detected in code-projects Online Job Portal 1.0. This impacts an unknown function of t
A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function S
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some u
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown par
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability i
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some u
The Event Tickets and Registration WordPress plugin before 5.28.4 does not properly escape event titles before outputtin
The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not sanitize or escape certain megamenu menu-item
The Brizy WordPress plugin before 2.8.19 does not properly restrict who can modify its site-global design data and does
The GeoDirectory WordPress plugin before 2.8.110 does not sanitise and escape a place-category setting before outputtin
A flaw has been found in SourceCodester Photo Share Website 1.0. The affected element is an unknown function of the file
A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /soci
A vulnerability was detected in code-projects Online Food Order System 1.0. The affected element is an unknown function
A security flaw has been discovered in code-projects Online Shopping System 1.0. Affected by this issue is some unknown
Frequently Asked Questions
What is CWE-79?
CWE-79 (Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-79?
There are 53,037 CVE records associated with CWE-79 in our database. Of these, 560 are critical severity, 4909 are high severity, and 31199 are medium severity.
How can I protect against CWE-79 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-79 using AI-powered security agents.
Detect CWE-79 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of input during web page generation (cross-site scripting) vulnerabilities across your infrastructure.
Get Started