Read the docs

CWE-79 - Cross-site Scripting

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

CWE-79 - Cross-site Scripting records in CISA KEV

No CWE-79 - Cross-site Scripting vulnerabilities are listed in CISA KEV.

Records

1 record

Priority LOW 26

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting (XSS).

CVSS 4.0MEDIUM 5.8 Network Low privileges No interaction EPSS 0.0023 Published 2026-10-01 Fixed in 3.0b63 CWE-79
Open these records in search →