CWE-79
MITRE ↗Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)
A vulnerability was determined in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /customer/account
The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not escape one of its set
There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.5 and prior that allows a remote, highly
The CMP WordPress plugin before 4.1.18 does not sanitise and escape a settings value before outputting it on the coming
A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an
A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown functi
A vulnerability was identified in Beetel 450TC3 01.00.00_01. This vulnerability affects unknown code of the component Us
Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interf
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking applic
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
A Joomla user with K2 "create item" rights (Author tier by default) can submit an article whose `embedVideo` POST field
A vulnerability was detected in zhanglun lettura up to 0.1.22. This issue affects some unknown processing of the file sr
Vulnerability in Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u471-b50
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking applic
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. In versions prior to
October is a Content Management System (CMS) and web platform. Prior to 3.7.16 and 4.1.16, a reflected Cross-Site Script
HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability where the application utilizes t
SeaweedFS before 4.30 reflects the callback query parameter verbatim into responses served with Content-Type application
A security flaw has been discovered in OpenAkita up to 1.27.12. This vulnerability affects unknown code of the file /api
A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication
Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 allow administrators to define a custo
Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi HTML exports render session Markdown into a static
A vulnerability was found in xnx3 wangmarket up to 6.4. This affects an unknown function of the file /siteVar/save.do of
A security flaw has been discovered in xnx3 wangmarket up to 4.9. Affected by this issue is some unknown functionality o
A weakness has been identified in xnx3 wangmarket up to 4.9. This affects the function variableList of the file /admin/s
A vulnerability was detected in projectworlds House Rental and Property Listing 1.0. This issue affects some unknown pro
A flaw has been found in PHPGurukul Staff Leave Management System 1.0. The affected element is the function ADD_STAFF/UP
A vulnerability was found in Luxul XWR-600 up to 4.0.1. The affected element is an unknown function of the component Web
A weakness has been identified in technical-laohu mpay up to 1.2.4. The affected element is an unknown function of the c
A vulnerability has been found in iJason-Liu Books_Manager up to 298ba736387ca37810466349af13a0fdf828e99c. This affects
A vulnerability was identified in rethinkdb up to 2.4.3. Affected by this issue is some unknown functionality of the com
A vulnerability was detected in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function ad_virtual_se
A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of t
A vulnerability has been found in Edimax BR-6288ACL up to 1.12. Impacted is the function wiz_WISP24gmanual of the file w
A weakness has been identified in code-projects Online Student Management System 1.0. The impacted element is an unknown
A weakness has been identified in heyewei JFinalCMS 5.0.0. This affects an unknown function of the file /admin/admin/sav
A security vulnerability has been detected in ZeroWdd studentmanager up to 2151560fc0a50ec00426785ec1e01a3763b380d9. Thi
A weakness has been identified in code-projects for Plugin 1.0. This affects an unknown part of the file /Administrator/
A weakness has been identified in code-projects Online Reviewer System 1.0. Affected by this vulnerability is an unknown
A security vulnerability has been detected in funadmin up to 7.1.0-rc4. This vulnerability affects unknown code of the f
A security flaw has been discovered in YiFang CMS up to 2.0.5. The impacted element is the function update of the file a
A weakness has been identified in YiFang CMS up to 2.0.5. This affects the function update of the file app/db/admin/D_ad
A security vulnerability has been detected in YiFang CMS up to 2.0.5. This impacts the function update of the file app/d
A vulnerability was found in itsourcecode Student Management System 1.0. The impacted element is an unknown function of
A security flaw has been discovered in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.9. The affected element is an unknown
A vulnerability was determined in a466350665 Smart-SSO up to 2.1.1. This affects the function Save of the file smart-sso
A security vulnerability has been detected in xingfuggz BaykeShop up to 1.3.20. Impacted is an unknown function of the f
A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected
A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0. This vulnerability
A vulnerability was detected in PHPGurukul Student Record Management System 1.0. This issue affects some unknown process
Frequently Asked Questions
What is CWE-79?
CWE-79 (Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-79?
There are 53,037 CVE records associated with CWE-79 in our database. Of these, 560 are critical severity, 4909 are high severity, and 31199 are medium severity.
How can I protect against CWE-79 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-79 using AI-powered security agents.
Detect CWE-79 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of input during web page generation (cross-site scripting) vulnerabilities across your infrastructure.
Get Started