Falhas do tipo CWE-80

646 resultados

Falta de neutralização de tags HTML relacionadas a scripts (XSS básico)

Ocorre quando a aplicação web recebe entrada do usuário e a exibe no HTML sem sanitizar tags de script e eventos (como <script>, onclick, onerror). Um atacante injeta código JavaScript malicioso que executa no navegador da vítima, roubando cookies, sessões ou dados sensíveis.

Exemplo

Um formulário de comentários aceita '<img src=x onerror="alert(document.cookie)">'. A aplicação exibe o comentário sem filtro na página, e o navegador executa o código malicioso quando carrega a imagem inválida, capturando a sessão do usuário.

Como mitigar

Escape ou remova todas as tags HTML perigosas antes de renderizar (use bibliotecas como DOMPurify ou sanitizadores nativos da stack). Aplique Content Security Policy (CSP) nos headers HTTP para bloquear inline scripts mesmo que a injeção passe.

CVE-2025-11745MEDIUMAd Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom FieldEPSS 0.2%CVE-2026-5389MEDIUMjusthtml before 1.13.0 XSS via code fence breakoutEPSS 0.2%CVE-2025-25363MEDIUMAn authenticated stored cross-site scripting (XSS) vulnerability in The Plugin People Enterprise Mail Handler for Jira Data Center (JEMH) beEPSS 0.2%CVE-2025-52564MEDIUMChamilo: HTML injection via open parameterEPSS 0.2%CVE-2026-27085LOWWordPress Astra WordPress theme theme <= 4.13.12 - Content Injection vulnerabilityEPSS 0.2%CVE-2025-20342MEDIUMCisco Integrated Management Controller Virtual Keyboard Video Monitor (vKVM) Stored Cross-Site Scripting VulnerabilityEPSS 0.2%CVE-2026-28132MEDIUMWordPress WooCommerce Photo Reviews plugin <= 1.4.4 - Content Injection vulnerabilityEPSS 0.2%CVE-2025-8621MEDIUMMosaic Generator <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'c' ParameterEPSS 0.2%CVE-2023-54409MEDIUMFrappe before 13.46.1 XSS via html2text Weak SanitizationEPSS 0.2%CVE-2025-11823MEDIUMShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.2%CVE-2026-20170MEDIUMA vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to cEPSS 0.2%CVE-2026-27578HIGHn8n Vulnerable to Stored XSS via Various NodesEPSS 0.2%CVE-2026-32753HIGHFreeScout: Stored XSS through SVG file upload with filter bypassEPSS 0.2%CVE-2025-27358MEDIUMWordPress Frontend File Manager plugin <= 23.6 - Content Injection vulnerabilityEPSS 0.2%CVE-2025-27514MEDIUMGLPI is susceptible to Stored XSS attack through project's kanbanEPSS 0.2%CVE-2025-11161MEDIUMWPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading ShortcodeEPSS 0.2%CVE-2025-11160MEDIUMWPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS ModuleEPSS 0.2%CVE-2025-45160MEDIUMA HTML injection vulnerability exists in the file upload functionality of Cacti <= 1.2.29. When a file with an invalid format is uploaded, tEPSS 0.2%CVE-2026-34246MEDIUMCtrlPanel: Stored XSS in Admin Role Management via Unescaped DataTable HTML OutputEPSS 0.2%CVE-2025-13505MEDIUMStored XSS in Datateam's DatactiveEPSS 0.2%