Falhas do tipo CWE-80

586 resultados

Falta de neutralização de tags HTML relacionadas a scripts (XSS básico)

Ocorre quando a aplicação web recebe entrada do usuário e a exibe no HTML sem sanitizar tags de script e eventos (como <script>, onclick, onerror). Um atacante injeta código JavaScript malicioso que executa no navegador da vítima, roubando cookies, sessões ou dados sensíveis.

Exemplo

Um formulário de comentários aceita '<img src=x onerror="alert(document.cookie)">'. A aplicação exibe o comentário sem filtro na página, e o navegador executa o código malicioso quando carrega a imagem inválida, capturando a sessão do usuário.

Como mitigar

Escape ou remova todas as tags HTML perigosas antes de renderizar (use bibliotecas como DOMPurify ou sanitizadores nativos da stack). Aplique Content Security Policy (CSP) nos headers HTTP para bloquear inline scripts mesmo que a injeção passe.

CVE-2026-20170MEDIUMA vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to cEPSS 0.2%CVE-2026-27116MEDIUMVikunja has Reflected HTML Injection via filter Parameter in Projects ModuleEPSS 0.2%CVE-2025-60244HIGHWordPress TableOn plugin <= 1.0.5.1 - Content Injection vulnerabilityEPSS 0.2%CVE-2025-5686MEDIUMPaged Gallery <= 0.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-14792MEDIUMKey Figures <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting via kf_field_figure_default_color_renderEPSS 0.2%CVE-2025-11745MEDIUMAd Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom FieldEPSS 0.2%CVE-2026-34246MEDIUMCtrlPanel: Stored XSS in Admin Role Management via Unescaped DataTable HTML OutputEPSS 0.2%CVE-2025-12753MEDIUMChart Expert <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.2%CVE-2025-52897MEDIUMGLPI is vulnerable to XSS and open redirection attacks through planning featureEPSS 0.2%CVE-2025-11160MEDIUMWPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS ModuleEPSS 0.2%CVE-2025-11161MEDIUMWPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading ShortcodeEPSS 0.2%CVE-2025-66450HIGHLibreChat JSON Injection in Chat POST Allows Remote Resource Inclusion and PXSS via Image UploadEPSS 0.2%CVE-2025-8621MEDIUMMosaic Generator <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'c' ParameterEPSS 0.2%CVE-2025-45160MEDIUMA HTML injection vulnerability exists in the file upload functionality of Cacti <= 1.2.29. When a file with an invalid format is uploaded, tEPSS 0.2%CVE-2025-11823MEDIUMShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.2%CVE-2026-32753HIGHFreeScout: Stored XSS through SVG file upload with filter bypassEPSS 0.2%CVE-2025-31075MEDIUMWordPress MicroPayments plugin <= 2.9.29 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-29426MEDIUMCode-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/class.php via the id and cyEPSS 0.2%CVE-2025-31604MEDIUMWordPress Cal.com plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-20232MEDIUMCisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting VulnerabilityEPSS 0.2%