CWE-79 - Cross-site Scripting has 1 CVE on record. 1 was published in the last 90 days. The median CVSS is 5.8 (medium).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 5.8
Publish → KEV: —
Last 90 days: 1 prev 0

Weakness classes

CWE-79 1

Products

CAPEC-63 1

Follow CWE-79 - Cross-site Scripting:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-71454Medium· 5.8Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting (XSS). This issue affects CAPEC-63: before 3.0b63.32

CWE-79 - Cross-site Scripting vulnerabilities

CVEs affecting CWE-79 - Cross-site Scripting, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-71454Medium· 5.8

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting (XSS). This issue affects CAPEC-63: before 3.0b63.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting (XSS). This issue affects CAPEC-63: before 3.0b63.

▾ SunlitCWE-79 - Cross-site Scripting · CAPEC-63via NVD

CWE-79 - Cross-site Scripting vulnerabilities (CVEs) · VulnSea