cve.bz

CWE-79: Improper Neutralization of Input During Web Page Generation (Cross-site Scripting), page 58

Filter

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

What the weakness is: CWE-79 at MITRE

Ask an AI about CWE-79

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-79: Improper Neutralization of Input During Web Page Generation and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/79.html and https://cve.bz/cve/cwe/79?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.1CVE-2026-66597EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.4 versions.

  2. 7.1CVE-2026-66590EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Tagembed <= 7.4 versions.

  3. 7.1CVE-2026-66582EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in TranslatePress <= 3.3.2 versions.

  4. 7.1CVE-2026-66581EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.1 versions.

  5. 5.3CVE-2026-76569EPSS 0.4%

    Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4

  6. 5.3CVE-2026-76565EPSS 0.4%

    Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7

  7. 8.6CVE-2026-76564EPSS 0.4%

    Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7

  8. 8.6CVE-2026-75948EPSS 0.4%

    Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 - The frontend "Submit an Event" form stores the `image` and `file` fields as raw strings with no output-side HTML-attribute escaping.

  9. 5.1CVE-2026-71368EPSS 0.3%

    F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed.

  10. 6.8CVE-2026-74992EPSS 0.4%

    The Kirki WordPress plugin before 6.2.3 does not properly validate the files contained in archives uploaded by users with the Editor role, and does not remove all unwanted files after extracting them, allowing such users to upload arbitra…

  11. 6.8CVE-2026-19697EPSS 0.4%

    The GutenKit WordPress plugin before 2.5.0 does not sanitise uploaded SVG files on all of the upload paths it enables, allowing users with the file upload capability, such as Author, to upload a malicious SVG and perform Stored Cross-Site…

  12. 6.8CVE-2026-19615EPSS 0.4%

    The Admin and Site Enhancements (ASE) WordPress plugin before 9.0.1 does not sanitise uploaded SVG files on every route it accepts them through, allowing users with a role the site owner granted upload access to store a file containing Jav…

  13. 4.0CVE-2026-76367EPSS 0.2%

    In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role could store JavaScript in a note and run it in the browser of another user when that user opens the note. The stored Cross-Site Scripting (XSS)…

  14. 5.4CVE-2026-76346EPSS 0.2%

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a malicious script in dashboard sparkline format options and execute unauthorized JavaScript in the browser of ano…

  15. 7.1CVE-2026-76333EPSS 0.3%

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a Dashboard Studio workflow action with a crafted Uniform Resource Locator (URL). When another authenticated user …

  16. 5.7CVE-2026-76326EPSS 0.3%

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could store a dashboard view that runs JavaScript in the browser of another user who opens it and hovers o…

  17. 7.3CVE-2026-76325EPSS 0.4%

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a malicious ui-tour knowledge object that matches an auto-tour page name and share the object at the app level. Th…

  18. 5.4CVE-2026-76324EPSS 0.3%

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could create a malicious Splunk Web tour and cause arbitrary JavaScript to run in the browser of another user when that user o…

  19. 5.4CVE-2026-76318EPSS 0.3%

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_search capability could store a malicious script in an alert trigger condition field. When another user opens the crafted li…

  20. 6.1CVE-2026-76252EPSS 0.3%

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.13, an unauthenticated user who tricks another user into visiting a malicious web page could run unauthorized JavaScript in that user's browser. This could allow for unaut…

  21. 6.4CVE-2026-54743EPSS 0.5%

    Lemmy is a link aggregator and forum for the fediverse. Prior to lemmy-ui 0.19.19-beta.1, LemmyNet/lemmy-ui renders Markdown in src/shared/markdown.ts for post bodies, comment bodies, private messages, and community and site sidebars throu…

  22. 7.6CVE-2026-68900EPSS 0.4%

    Wekan is open source kanban built with Meteor. From 8.72 until 10.23, addBoardHTMLToZip() in client/lib/exportHTML.js read a card title and body through textContent, which decoded entity-encoded markup, and then interpolated titleText and …

  23. 5.3CVE-2026-67189EPSS 1.2%

    pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by reverse DNS lookups are incorporated without sanitization i…

  24. 5.3CVE-2026-55090EPSS 0.5%

    Etherpad is a real-time collaborative editor. Prior to 3.3.0, getHTMLFromAtext in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data attributes without HTML attribute escap…

  25. 6.1CVE-2026-55087ExploitEPSS 0.6%

    Etherpad is a real-time collaborative editor. From 2.1.0 until 3.1.0, Etherpad uses the attacker-controlled x-proxy-path request header in src/node/hooks/express/admin.ts when substituting paths into HTML, JavaScript, and CSS under /admin …

  26. 9.6CVE-2026-55085EPSS 0.5%

    Etherpad is a real-time collaborative editor. Prior to 3.3.1, result.appendSpan in src/static/js/domline.ts interpolates the start attribute of a numbered list directly into an unquoted ol start attribute before assigning the generated mar…

  27. 6.3CVE-2026-61807EPSS 0.2%

    Snipe-IT is an IT asset/license management system. Prior to 8.6.2, a stored manufacturer or supplier name passed as the table component $name becomes data-selected-count-id in resources/views/partials/bootstrap-table.blade.php. Client-side…

  28. 8.5CVE-2026-64851EPSS 0.5%

    Grav Shortcode Core Plugin allows for the development shortcode plugins that utilize the common format utilized by WordPress and BBCode. Prior to 6.2.2, Grav Shortcode Core passes shortcode syntax through Security::detectXss() because it c…

  29. 4.6CVE-2026-61607EPSS 0.3%

    Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.2, the Grav API plugin POST /api/v1/media pipeline in HandlesMediaUploads::processUploadedFile() validates an SVG filenam…

  30. 7.2CVE-2026-18430EPSS 0.5%

    HumHub 1.18.4 contains a stored cross-site scripting vulnerability in the comment-deletion notification flow. A Space administrator can delete another user's comment, choose to notify the original author, and place HTML/JavaScript in the d…

  31. 5.1CVE-2026-75955EPSS 0.4%

    Joomla Extension - cmsjunkie.com - Reflected XSS / XML injection in J-BusinessDirectory < 6.2.3 - companyName from the request was written unescaped into an XML attribute.

  32. 5.4CVE-2026-54793EPSS 0.2%

    Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit thi…

  33. 5.1CVE-2026-40508EPSS 0.3%

    OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the patient portal template import handler that allows authenticated attackers with Forms Administration permissions to upload template files containing arbitrary…

  34. 5.1CVE-2026-40507EPSS 0.3%

    OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patient portal template import handler. The templateHtml GET parameter is reflected into the page response without sanitization. An attacker can craft a UR…

  35. 7.2CVE-2026-18756EPSS 0.5%

    HumHub Community Edition 1.18.4 contains a reflected cross-site scripting vulnerability in the Space membership-request workflow. An attacker can place attacker-controlled button configuration in the options query-string parameter of space…

  36. 7.4CVE-2026-18526EPSS 0.5%

    HumHub Community Edition 1.18.4 and 1.18.4-pl1 contain a stored Cross-Site Scripting (XSS) vulnerability in the oEmbed confirmation rendering workflow.

  37. 9.3CVE-2026-75917EPSS 0.2%

    SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file-tree picker's hover-tooltip generation (app/src/util/pathName.ts, getLeaf()/movePathTo()) used by the 'move/link to' path-selection dialogs, where document meta…

  38. 9.3CVE-2026-75916EPSS 0.2%

    SiYuan through 3.7.3 contains a cross-site scripting vulnerability in the '((' block-reference autocomplete hint popup. In genHintItemHTML() (app/src/protyle/hint/extend.ts), a candidate block's name, alias, and memo fields are concatenate…

  39. 7.1CVE-2026-73354EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.

  40. 7.1CVE-2026-73184EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.

  41. 7.1CVE-2026-73182EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in BBQ Pro <= 3.9 versions.

  42. 7.1CVE-2026-66596EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.

  43. 7.1CVE-2026-61986EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions.

  44. 4.8CVE-2026-18372EPSS 0.4%

    CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to other vault users.

  45. 5.1CVE-2026-18371EPSS 0.4%

    HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users.

  46. 7.2CVE-2026-75981EPSS 0.4%

    The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to unauthenticated Stored Cross-Site Scripting in versions up to and including 3.2.5. The special gettext markers '#!trpst#' and '#!tr…

  47. 7.2CVE-2026-15780EPSS 0.6%

    The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_campaign' parameter in all versions up to, and including, 14.16.8 due to insufficient …

  48. 6.4CVE-2026-15446EPSS 0.4%

    The EWWW Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content in all versions up to, and including, 8.7.3 due to insufficient input sanitization and output …

  49. 7.1CVE-2026-19056EPSS 0.3%

    The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administrative pages, leading to reflected Cross-Site Scripting that runs in the se…

  50. 7.1CVE-2026-19055EPSS 0.3%

    The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading to reflected Cross-Site Scripting that can be triggered again…