Weaknesses of type CWE-116

427 results

Codificação ou escape inadequado de saída

A aplicação falha em codificar ou fazer escape apropriado dos dados antes de enviá-los ao usuário, permitindo que caracteres especiais sejam interpretados como código (HTML, JavaScript, SQL, etc.). Isso abre brecha para injeção de payload malicioso, especialmente XSS em contextos web.

Example

Um formulário de busca que exibe o termo pesquisado sem escape: se o usuário digita '<img src=x onerror=alert(1)>', a página renderiza o JavaScript em vez de mostrar o texto como string inócua.

How to mitigate

Aplique escape contextual (HTML entity encoding para HTML, JavaScript encoding para scripts, URL encoding para parâmetros) usando bibliotecas consolidadas da sua stack (DOMPurify, OWASP ESAPI, etc.). Validar entrada é primeira linha de defesa, mas escape de saída é crítico e obrigatório.

CVE-2025-59936CRITICALget-jwks poisoned JWKS cache allows post-fetch issuer validation bypassEPSS 0.4%CVE-2026-13635MEDIUMAn improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-7280EPSS 0.4%CVE-2026-55570CRITICALSiYuan: Stored XSS results to Electron RCE in SiYuan marketplace via unescaped `data-obj` attribute (Bypass for CVE-2026-45375's patch)EPSS 0.4%CVE-2026-113867CRITICALStanza injection in XMPP chatEPSS 0.4%CVE-2026-73161MEDIUMcti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search HighlightingEPSS 0.4%CVE-2026-59727LOWAstro: Cross-site scripting via unescaped transition:* directive values on hydrated islandsEPSS 0.4%CVE-2026-27169HIGHOpenSift: Persistent XSS Chat Tool RenderingEPSS 0.4%CVE-2026-95659MEDIUMMISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind ThreadEPSS 0.4%CVE-2023-52098HIGHDenial of Service (DoS) vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability.EPSS 0.4%CVE-2024-46547HIGHA vulnerability was found in Romain Bourdon Wampserver all versions (discovered in v3.2.3 and v3.2.6) where unauthorized users could access EPSS 0.4%CVE-2026-31898HIGHjsPDF has a PDF Object Injection via FreeText colorEPSS 0.4%CVE-2025-11085HIGHFactoryTalk® DataMosaix™ Private Cloud – Persistent XSSEPSS 0.4%CVE-2023-28733HIGHStored XSS affecting the AcyMailing plugin for Joomla EPSS 0.4%CVE-2025-15312MEDIUMTanium addressed an improper output sanitization vulnerability in TanOS.EPSS 0.4%CVE-2026-73195HIGHApache Syncope: CSV export spreadsheet formula injectionEPSS 0.4%CVE-2026-113667MEDIUMApostropheCMS: CAPTCHA response token not URL-encodedEPSS 0.4%CVE-2026-45570LOWgo-git: Improper single-quote escaping in go-git SSH transportEPSS 0.4%CVE-2026-114510HIGHFlexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document contentEPSS 0.4%CVE-2026-55659HIGHGrist: XSS through unsafe value interpolation in server-rendered pagesEPSS 0.4%CVE-2026-110592MEDIUMBottleCRM 0.30 through 1.14.5 HTML Injection via Custom Invoice PDF TemplateEPSS 0.4%