Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Weakness · CWE-79

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "CWE-79",
  "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
  "type": "Weakness",
  "source_url": "https://cwe.mitre.org/data/definitions/79.html",
  "snapshot": "cwe.xml",
  "status": "Stable",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "abstraction": "Base",
  "source_version": "4.20"
}

Explicit source assertions (6)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.