CWE-116 — Improper Encoding or Escaping of Output

Abstraction: Class  |  Status: Draft
Description

Cross-site scripting in chat application via a message, which normally might be allowed to contain arbitrary content.

Raw catalog entry
MITRE page
{
  "abstraction": "Class",
  "description": "Cross-site scripting in chat application via a message, which normally might be allowed to contain arbitrary content.",
  "id": "CWE-116",
  "name": "Improper Encoding or Escaping of Output",
  "status": "Draft"
}
View JSON API Download JSON