Weaknesses of type CWE-116

427 results

Codificação ou escape inadequado de saída

A aplicação falha em codificar ou fazer escape apropriado dos dados antes de enviá-los ao usuário, permitindo que caracteres especiais sejam interpretados como código (HTML, JavaScript, SQL, etc.). Isso abre brecha para injeção de payload malicioso, especialmente XSS em contextos web.

Example

Um formulário de busca que exibe o termo pesquisado sem escape: se o usuário digita '<img src=x onerror=alert(1)>', a página renderiza o JavaScript em vez de mostrar o texto como string inócua.

How to mitigate

Aplique escape contextual (HTML entity encoding para HTML, JavaScript encoding para scripts, URL encoding para parâmetros) usando bibliotecas consolidadas da sua stack (DOMPurify, OWASP ESAPI, etc.). Validar entrada é primeira linha de defesa, mas escape de saída é crítico e obrigatório.

CVE-2026-61398CRITICALApache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Instance Reset Password Function in UIEPSS 0.6%CVE-2023-42183MEDIUMlockss-daemon (aka Classic LOCKSS Daemon) before 1.77.3 performs post-Unicode normalization, which may allow bypass of intended access restrEPSS 0.6%CVE-2021-25254HIGHYandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.EPSS 0.6%CVE-2026-32754CRITICALFreeScout: Stored XSS via Unescaped Email Template Rendering ({!! $thread->body !!})EPSS 0.6%CVE-2023-5654MEDIUMThe React Developer Tools extension registers a message listener with window.addEventListener('message', <listener>) in a content script thaEPSS 0.6%CVE-2026-62184HIGHluci-app-banip Log Monitor IP Extraction BypassEPSS 0.6%CVE-2020-29023LOWCSV Formula Injection possible due to improper fields escaping in GateManagerEPSS 0.5%CVE-2023-3552HIGHImproper Encoding or Escaping of Output in nilsteampassnet/teampassEPSS 0.5%CVE-2026-55891NONEPrivateBin: Reflected JSON injection in backend responses via unescaped REQUEST_URIEPSS 0.5%CVE-2022-41322HIGHIn Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user mEPSS 0.5%CVE-2026-34479MEDIUMApache Log4j 1 to Log4j 2 bridge: Silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden charactersEPSS 0.5%CVE-2026-70609MEDIUMElectron: DevTools JavaScript Injection via Unsanitized Dock State ParameterEPSS 0.5%CVE-2023-29543HIGHAn attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vectEPSS 0.5%CVE-2026-43971MEDIUMLink Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1EPSS 0.5%CVE-2023-3190LOWImproper Encoding or Escaping of Output in nilsteampassnet/teampassEPSS 0.5%CVE-2022-43543MEDIUMKDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handling of Unicode controlEPSS 0.5%CVE-2025-61773HIGHpyLoad CNL and captcha handlers allow code Injection via unsanitized parametersEPSS 0.5%CVE-2021-47694MEDIUMNagios XI < 5.8.6 Core Config Manager (CCM) Reflected XSS via Test CommandEPSS 0.5%CVE-2025-8405HIGHImproper Encoding or Escaping of Output in GitLabEPSS 0.5%CVE-2026-55618MEDIUMeml_parser: URL extraction bypass via HTML entities in URLsEPSS 0.5%