CWE-116: Improper Encoding or Escaping of Output
The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.
Also known as Output Sanitization, Output Validation, Output Encoding.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- openclawOpenClaw < 2026.3.7 - Custom Authorization Header Leakage via Cross-Origin Redirects8.8 High
- xwiki blog application, xwiki-contrib application-blog-ui +1 moreXWiki Blog Application home page vulnerable to Stored XSS via Post Title8.6 High
- openclawOpenClaw < 2026.2.19 - Local Command Injection via Unsafe cmd Argument Handling in Windows Scheduled Task Script Generation6.9 Medium
- fedora-python lxml html cleanlxml_html_clean: <base> tag injection through default Cleaner configuration6.1 Medium
- fedora-python lxml html cleanlxml_html_clean: CSS @import Filter Bypass via Unicode Escapes6.1 Medium
- sub2apiSub2API Vulnerable to Password Reset Poisoning via Host Header Trust Issue, Leading to Account Takeover8.0 High
- go-vikunja vikunjaVikunja has Reflected HTML Injection via filter Parameter in Projects Module6.1 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick - Command Injection via SVG Decoder9.2 Critical
- open-emr openemrOpenEMR allows inconsistent escaping of translation function output1.2 Low
- shenzhen tenda technology co., ltd. tenda f3, tenda f3 firmware +1 moreTenda F3 Reflected Script Execution via Missing nosniff Header5.1 Medium
- isso-comments issoIsso: Stored XSS via comment website field6.1 Medium
- opensiftOpenSift: Persistent XSS Chat Tool Rendering8.9 High
- com.ritense.valtimo web, pi-hole web interface +1 morePi-hole Web Interface has Stored HTML Injection via X-Forwarded-For Header in Active Sessions Table5.4 Medium
- com.ritense.valtimo web, pi-hole web interface +1 morePi-hole Web Interface has Stored HTML Injection via Local DNS Records (CNAME/Hosts) in data-tag Attribute5.4 Medium
- parall jspdf, red hat advanced cluster security 4.8, advanced cluster security 4.9 +2 morejsPDF's PDF Injection in AcroForm module allows Arbitrary JavaScript Execution (RadioButton.createOption and "AS" property)8.1 High
- parall jspdf, red hat advanced cluster security 4.8, advanced cluster security 4.9 +2 morejsPDF has PDF Object Injection via Unsanitized Input in addJS Method8.1 High
- fabricjs fabric.jsFabric.js Affected by Stored XSS via SVG Export7.6 High
- librenmsLibreNMS has Stored XSS in Custom OID - unit parameter missing strip_tags()5.4 Medium
- error311 fileriseFileRise affected by HTML Injection using color property in file tags4.6 Medium
- tanium appliance, tanos +1 moreTanium addressed an improper output sanitization vulnerability in TanOS.6.6 Medium
- htmlsanitizer project htmlsanitizerHtmlSanitizer has a bypass via template tag6.3 Medium
- parall jspdf, red hat advanced cluster security 4, advanced cluster security 4.8 +1 more +3 morejsPDF has a PDF Injection in AcroFormChoiceField which allows Arbitrary JavaScript Execution8.1 High
- discourseDiscourse allows script execution in uploaded HTML/XML files on S34.6 Medium
- vercel next.jsNext.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies6.3 Medium
- mozilla thunderbirdCSS-based exfiltration of the content from partially encrypted emails when allowing remote content4.3 Medium
- shenzhen tenda technology co., ltd. w30e v2, tenda w30e firmware +1 moreTenda W30E V2 Lacks X-Content-Type-Options Header2.1 Low
- typemillTypemill has Reflected XSS via login error view template5.4 Medium
- docmostDocmost is vulnerable to stored Cross-Site Scripting (XSS) through Mermaid rendering6.3 Medium
- 5ire5ire vulnerable to Remote Code Execution (RCE)9.7 Critical
- hackucf onboardliteOnboardLite has stored Cross-site Scripting issue that may lead to admin Account Take Over7.3 High
- altium liveStored Cross-Site Scripting in Altium Live Support Center Comment Endpoint6.1 Medium
- the wikimedia foundation mediawiki - approvedrevs extension, wikiworks approved revs +1 moreApprovedRevs allows bypassing the inline CSS sanitizer2.3 Low
- coollabs coolifyCoolify has Stored XSS in Project Name9.4 Critical
- bulwarkmail webmailRoundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure...7.2 High
- gitlabImproper Encoding or Escaping of Output in GitLab3.5 Low
- gitlabImproper Encoding or Escaping of Output in GitLab7.7 High
- sap se businessobjects business intelligence platformServer-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence Platform5.4 Medium
- nextcloud deck, kiteworks security-advisories +1 moreNextcloud Deck app allows to spoof file extensions by using RTLO characters3.3 Low
- open-webui, openwebui open webui +1 moreOpen WebUI vulnerable to Stored DOM XSS via Note 'Download PDF'8.7 High
- pure storage px enterprise, purestorage portworx +1 morePX Enterprise Improper Sanitization Vulnerability8.4 High
- pretixLimited HTML injection in emails2.4 Low
- emby, embysupport emby.security +1 moreEmby Server is Vulnerable to Remote Code Execution Through XSS in Admin Dashboard8.4 High
- solarwinds serv-uSolarWinds Serv-U Logic Abuse - Remote Code Execution Vulnerability9.1 Critical
- rockwell automation factorytalk® datamosaix™ private cloudFactoryTalk® DataMosaix™ Private Cloud – Persistent XSS8.6 High
- onlookA DOM-based Cross-Site Scripting (XSS) vulnerability exists in the text editor feature of the...6.1 Medium
- No product listedMDaemon Mail Server 23.5.2 validates SPF, DKIM, and DMARC using the email enclosed in angle...7.1 High
- nagios xiNagios XI < 5.8.6 Core Config Manager (CCM) Reflected XSS via Test Command5.1 Medium
- zte mc889a proDOS Vulnerability in ZTE MC889A Pro product5.3 Medium
- mozilla firefox, thunderbird +1 morePotential user-assisted code execution in “Copy as cURL” command8.1 High
- mozilla firefox, thunderbird +1 moreAn OBJECT tag type attribute overrode browser behavior on web resources without a content-type6.1 Medium
- Show moreLoading…