CWE-94: Improper Control of Generation of Code
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
Also known as Code Injection.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- patriksimek vm2, red hat developer hub, self-service automation portal 2 +2 morevm2: Sandbox Breakout Through Promise Species9.8 Critical
- patriksimek vm2, red hat developer hub, self-service automation portal 2 +2 moreVM2 Sandbox Breakout Through __lookupGetter__9.8 Critical
- apache atlasApache Atlas: Script injection allows access to unintended data8.1 High
- profelis information and consulting trade and industry limited company sambaboxRCE in Profelis Informatics' SambaBox7.2 High
- No product listedAn issue in Lymphatus caesium-image-compressor All versions up to and including commit 02da2c6...7.8 High
- av stumpfl pixera two media serverAV Stumpfl Pixera Two Media Server Websocket API code injection6.9 Medium
- langflow-ai langflowlangflow-ai langflow LambdaFilterComponent lambda_filter.py eval code injection5.3 Medium
- kerwincui fastbeekerwincui FastBee System Notice SysNoticeController.java add cross site scripting5.1 Medium
- sgl-project sglangsgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer code injection6.3 Medium
- marketingfire widget options – advanced conditional visibility for gutenberg blocks & classic widgets, marketing fire, llc widget options - extended +1 moreWidget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic8.8 High
- nextlevelbuilder ui-ux-pro-max-skillnextlevelbuilder ui-ux-pro-max-skill Slide Generator generate-slide.py data.get cross site scripting5.3 Medium
- nextlevelbuilder ui-ux-pro-max-skillnextlevelbuilder ui-ux-pro-max-skill Tailwind Config Generator tailwind_config_gen.py _format_plugins code injection5.3 Medium
libimage-exiftool-perlDebian,perl-Image-ExifToolopenEuler +1 moreExiftool JPEG/QuickTime/MOV/MP4 GM.pm Process_mrld code injection4.8 Medium- bitwarden cliBitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had...8.8 High
- bootstrap cmsBootstrap CMS Page Creation show.blade.php code injection5.3 Medium
- ibm langflow desktop, langflow desktop +1 moreAuthenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint8.8 High
- linkstackorg linkstackLinkStackOrg LinkStack UserController.php editPage cross site scripting5.1 Medium
- qt, qt qtdeclarative, red hat multicluster global hub +10 more +12 morePossible QML code injection in VectorImage component7.4 High
krayin/laravel-crmPackagistKrayin CRM allows a remote attacker to execute arbitrary code via compose email function8.1 High- n8nn8n: Python Task Runner Sandbox Escape7.1 High
- cockpit cmsCockpit CMS Authenticated Remote Code Execution via Collections8.7 High
- sourcecodester cet automated grading system with ai predictive analyticsSourceCodester CET Automated Grading System with AI Predictive Analytics Registration index.php register cross site scripting5.3 Medium
- berabuddies agentflowAgentFlow Arbitrary Python Pipeline Execution via pipeline_path7.7 High
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System index.php customer cross site scripting5.1 Medium
- No product listedEyouCMS Template File FilemanagerLogic.php editFile code injection5.1 Medium
cockpit-hq/cockpitPackagistCockpit is vulnerable to arbitrary code execution9.8 Critical- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System ajax.php save_user cross site scripting4.8 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System ajax.php save_order cross site scripting4.8 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System ajax.php save_menu cross site scripting4.8 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System index.php save_settings cross site scripting4.8 Medium
- opencatsOpenCATS PHP Code Injection via installer AJAX endpoint9.2 Critical
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System index.php supplier cross site scripting4.8 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System index.php cross site scripting4.8 Medium
- spring ai, vmware spring ai +1 moreSpring AI has a VectorStore FilterExpression Converter injection8.6 High
- sourcecodester safety anger padSourceCodester Safety Anger Pad cross site scripting5.3 Medium
- code-projects coaching management systemcode-projects Coaching Management System Complaint Form complaint.php cross site scripting5.1 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System index.php cross site scripting5.3 Medium
- aws qnabot on awsArbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS8.6 High
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System index.php cross site scripting5.3 Medium
- code-projects employee management systemcode-projects Employee Management System mark.php cross site scripting5.3 Medium
- code-projects invoice system in laravelcode-projects Invoice System in Laravel item cross site scripting5.1 Medium
- code-projects employee management systemcode-projects Employee Management System edit.php cross site scripting5.3 Medium
- code-projects chat systemcode-projects Chat System send_message.php cross site scripting4.8 Medium
- code-projects home service systemcode-projects Home Service System Appointment Booking booking.php cross site scripting5.3 Medium
- d-link dsl-2740r, dlink dsl-2740r firmware +1 moreD-Link DSL-2740R Wireless Setup Section cross site scripting4.8 Medium
- d-link dgs-3420, dlink dgs-3420-28tc firmware +1 moreD-Link DGS-3420 System Information Settings cross site scripting6.8 Medium
- maxsite cmsMaxSite CMS ushki Plugin cross site scripting4.8 Medium
- maxsite cmsMaxSite CMS Guestbook Plugin cross site scripting4.8 Medium
- maxsite cmsMaxSite CMS down_count Plugin cross site scripting4.8 Medium
- maxsite cmsMaxSite CMS mail_send Plugin cross site scripting4.8 Medium
- Show moreLoading…