Weaknesses of type CWE-116

371 results

Codificação ou escape inadequado de saída

A aplicação falha em codificar ou fazer escape apropriado dos dados antes de enviá-los ao usuário, permitindo que caracteres especiais sejam interpretados como código (HTML, JavaScript, SQL, etc.). Isso abre brecha para injeção de payload malicioso, especialmente XSS em contextos web.

Example

Um formulário de busca que exibe o termo pesquisado sem escape: se o usuário digita '<img src=x onerror=alert(1)>', a página renderiza o JavaScript em vez de mostrar o texto como string inócua.

How to mitigate

Aplique escape contextual (HTML entity encoding para HTML, JavaScript encoding para scripts, URL encoding para parâmetros) usando bibliotecas consolidadas da sua stack (DOMPurify, OWASP ESAPI, etc.). Validar entrada é primeira linha de defesa, mas escape de saída é crítico e obrigatório.

CVE-2026-40567MEDIUMFreeScout has HTML Injection in Outgoing Emails via Unsanitized Customer Name in Signature VariablesEPSS 0.2%CVE-2026-87550MEDIUMImproper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web oEPSS 0.2%CVE-2026-22712LOWApprovedRevs allows bypassing the inline CSS sanitizerEPSS 0.2%CVE-2026-40568HIGHFreeScout Vulnerable to XSS via Mailbox Signature Due to Incomplete HTML SanitizationEPSS 0.2%CVE-2026-27016MEDIUMLibreNMS has Stored XSS in Custom OID - unit parameter missing strip_tags()EPSS 0.2%CVE-2026-47175LOWQuest Bot: Moderation reason fields allow bot-powered `@everyone` / `@here` pingsEPSS 0.2%CVE-2026-47188LOWQuest Bot: Unban and unwarn reason fields still allow bot-powered mass mentions.EPSS 0.2%CVE-2025-24025LOWCoolify Vulnerable to Reflected XSS on Tag SearchEPSS 0.2%CVE-2026-33628MEDIUMInvoice Ninja Denylist Bypass may Lead to Stored XSS via Invoice Line ItemsEPSS 0.2%CVE-2026-46496CRITICALHAX CMS: Stored XSS via '<video-player>' component allows arbitrary JavaScript execution and token theftEPSS 0.2%CVE-2026-61696MEDIUMForem: Stored XSS in Admin Abuse Report RenderingEPSS 0.2%CVE-2026-28348MEDIUMlxml_html_clean: CSS @import Filter Bypass via Unicode EscapesEPSS 0.2%CVE-2025-61084HIGHMDaemon Mail Server 23.5.2 validates SPF, DKIM, and DMARC using the email enclosed in angle brackets (<>) in the From: header of SMTP DATA. EPSS 0.2%CVE-2026-61824HIGHDefuddle: XSS via unescaped attribute interpolation in site extractorsEPSS 0.2%CVE-2024-4420MEDIUMDenial of Service in Tink-ccEPSS 0.2%CVE-2026-84292HIGHfast-uri vulnerable to authority injection via an unvalidated port in serializeEPSS 0.2%CVE-2025-32074MEDIUMXSSes in Extension:ConfirmAccountEPSS 0.2%CVE-2026-27469MEDIUMIsso: Stored XSS via comment website fieldEPSS 0.2%CVE-2026-40483MEDIUMChurchCRM: Stored XSS in PledgeEditor.php via Donation Comment FieldEPSS 0.2%CVE-2026-49472MEDIUMFreeSWITCH includes a vulnerable function, PREFIX(prologTok)() from libexpatEPSS 0.2%