CWE-79 - Cross-site Scripting

Products

ProductCVEsExploitedLatest
CAPEC-631–Oct 1, 2026

Exploited and recent CVEs

  • CVE-2026-71454 Medium 5.8 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting (XSS). This issue affects CAPE 0.2%