CWE-85—Doubled Character XSS Manipulations

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID：
CWE-85
摘要：
Variant
结构：
Simple
状态：
Draft
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Doubled Character XSS Manipulations

描述

The web application does not filter user-controlled input for executable script disguised using doubling of the involved characters.

常见后果

范围：
Confidentiality, Integrity, Availability
影响：
Read Application Data, Execute Unauthorized Code or Commands

相关 CWE

browse all CWEs
相关工具:检查可疑链接 →运行更深入的网站漏洞扫描 →校验文件哈希 →