Falhas do tipo CWE-87

56 resultados

Neutralização inadequada de sintaxe alternativa de XSS

A aplicação tenta filtrar XSS bloqueando tags e atributos HTML conhecidos, mas falha contra variações alternativas de sintaxe (como espaços, tabulações, quebras de linha, entidades HTML ou protocolos alternativos). Um atacante usa essas formas alternativas para injetar código JavaScript que o filtro não reconhece.

Exemplo

Um filtro bloqueia '<script>' mas aceita '<script\n>' ou '<img src=x onerror\t=alert(1)>' ou '<img src="java&#x09;script:alert(1)">'. Cada variação contorna regras simplistas de sanitização.

Como mitigar

Use uma biblioteca consolidada de sanitização (DOMPurify, OWASP ESAPI) que normaliza a entrada antes de validar, e prefira sempre listar explicitamente o que é permitido (whitelist) em vez de bloquear variações conhecidas (blacklist).

CVE-2026-40321HIGHDotNetNuke.Core has stored cross-site-scripting (XSS) via SVG uploadEPSS 6.4%CVE-2023-35161CRITICALXWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in DeleteApplication pageEPSS 2.4%CVE-2023-35160CRITICALXWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit templateEPSS 2.3%CVE-2023-35159CRITICALXWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace templateEPSS 2.2%CVE-2023-35156CRITICALXWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in delete templateEPSS 2.1%CVE-2023-35158CRITICALXWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in restore templateEPSS 2.0%CVE-2022-36033MEDIUMjsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabledEPSS 1.5%CVE-2020-5298MEDIUMReflected XSS when importing CSV in OctoberCMSEPSS 0.9%CVE-2021-40131MEDIUMCisco Common Services Platform Collector Stored Cross-Site Scripting VulnerabilityEPSS 0.7%CVE-2022-39295MEDIUMImproper Neutralization of Alternate XSS Syntax in Knowage-ServerEPSS 0.6%CVE-2026-54002HIGHKirby: Cross-site scripting (XSS) from incomplete HTML/XML sanitization in `Dom::sanitize()`EPSS 0.5%CVE-2025-54369CRITICALNode-SAML SAML Authentication BypassEPSS 0.5%CVE-2025-27793MEDIUMVega vulnerable to Cross-site Scripting via RegExp.prototype[@@replace]EPSS 0.5%CVE-2023-20188MEDIUMA vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series ManEPSS 0.5%CVE-2026-33506HIGHDOM-Based XSS in Ory Polis Login PageEPSS 0.5%CVE-2023-20208MEDIUMA vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack agEPSS 0.5%CVE-2022-20963MEDIUMA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker EPSS 0.5%CVE-2024-43381MEDIUMreNgine vulnerable to Stored Cross-Site Scripting (XSS) via DNS Record PoisoningEPSS 0.4%CVE-2026-25688MEDIUMApache Answer: XSS in AI Answer RenderingEPSS 0.4%CVE-2026-55661MEDIUMTinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemesEPSS 0.4%