CWE-87—Improper Neutralization of Alternate XSS Syntax

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID：
CWE-87
摘要：
Variant
结构：
Simple
状态：
Draft
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Improper Neutralization of Alternate XSS Syntax

描述

The product does not neutralize or incorrectly neutralizes user-controlled input for alternate script syntax.

常见后果

范围：
Confidentiality, Integrity, Availability
影响：
Read Application Data, Execute Unauthorized Code or Commands

相关 CWE

browse all CWEs