CWE-79 - Cross-site Scripting
Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
CWE-79 - Cross-site Scripting records in CISA KEVNo CWE-79 - Cross-site Scripting vulnerabilities are listed in CISA KEV.
Priority LOW 26
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting (XSS).
CVSS 4.0MEDIUM 5.8· Network · Low privileges · No interaction · EPSS 0.0023 · Published 2026-10-01 · Fixed in 3.0b63 CWE-79
Open these records in search →