This page is experimental and may change significantly in future releases.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Properties
id: d3f:CWE-79
- name
- Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- definition
- The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
- synonyms
- CSS
- synonyms
- HTML Injection
- synonyms
- XSS
- synonyms
- Reflected XSS / Non-Persistent XSS / Type 1 XSS
- synonyms
- Stored XSS / Persistent XSS / Type 2 XSS
- synonyms
- DOM-Based XSS / Type 0 XSS
Neighbors