CWE-116

High likelihood

Improper Encoding or Escaping of Output

Parent: CWE-707 - Improper Neutralization

The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

446 vulnerabilities with CWE-116
CVE-2025-55729 CRITICAL
xwiki-pro-macros 1.0-1.26.4 - Remote Code Execution via ConfluenceLayoutSection Macro
CVSS 10.0
CVE-2025-56266 CRITICAL
Avigilon Access Control Manager 7.10.0.20 - Remote Code Execution via Host Header Injection
CVSS 9.8
CVE-2025-0083 MEDIUM
Multiple Locations - Info Disclosure
CVSS 4.0
CVE-2025-34141 MEDIUM
ETQ Reliance CG (legacy) < SE.2025.1 - Reflected Cross-Site Scripting in SQLConverterServlet
CVE-2025-6429 MEDIUM
Firefox < 140.0 and 128.12-128.* - URL Parsing Bypass via Embed Tag
CVSS 6.5
CVE-2025-49013 CRITICAL
WilderForge - Remote Code Execution via GitHub Actions Workflow Injection
CVSS 9.9
CVE-2025-48062 HIGH
Discourse <3.4.4, <3.5.0.beta5, <3.5.0.beta6-dev - XSS
CVSS 7.1
CVE-2025-25029 MEDIUM
IBM Security Guardium 12.0 - Info Disclosure
CVSS 4.9
CVE-2025-5271 MEDIUM
Firefox < 139.0 - Content Injection via Devtools Response Preview
CVSS 6.5
CVE-2025-3942 MEDIUM
Tridium Niagara <4.14.2-4.15.1-4.10.11 - Input Data Manipulation
CVSS 4.3
CVE-2025-1308 HIGH
Pure Storage PX Backup 1.0.0-2.5.9, 2.7.0-2.7.2, 2.8.0 - Information Exposure via Logging
CVE-2025-47280 MEDIUM
Umbraco Forms <13.4.2-15.1.2 - Info Disclosure
CVSS 6.1
CVE-2025-46340 HIGH
Misskey 12.0.0-2025.4.1 - CSS Injection via UrlPreviewService and MkUrlPreview
CVSS 7.2
CVE-2025-32974 CRITICAL
XWiki 15.9-15.10.7 and 16.0.0-16.1.0 - Privilege Escalation via TextArea Default Content Type
CVSS 9.0
CVE-2025-24338 HIGH
Bosch Rexroth ctrlX OS <2.6.0 Authenticated Stored XSS via Manages App Data
CVSS 7.1
CVE-2025-46347 CRITICAL
YesWiki < 4.5.4 - Remote Code Execution via Arbitrary File Write
CVSS 9.8
CVE-2025-4084 MEDIUM
Firefox <128.10 - Local Code Execution
CVSS 5.7
CVE-2025-31651 CRITICAL
Apache Tomcat 9.0.0-9.0.102, 10.1.0-M1-10.1.39, 11.0.0-M1-11.0.5 - Security Constraint Bypass
CVSS 9.8
CVE-2025-23377 MEDIUM
Dell PowerProtect Data Manager Reporting <19.18 - XSS
CVSS 4.2
CVE-2025-32078 MEDIUM
Mediawiki - Version Compare Ext <1.43 - XSS
CVE-2025-32074 MEDIUM
Mediawiki - Confirm Account Ext <1.39-1.43 - XSS
CVSS 5.4
CVE-2025-32072 MEDIUM
The Wikimedia Foundation Mediawiki Core - Feed Utils <1.44 - Code I...
CVE-2025-30657 MEDIUM
Juniper Junos OS DoS via Malformed BGP Update Message
CVSS 5.3
CVE-2025-30345 LOW
OpenSlides < 4.2.5 - Cross-Site Scripting via Chat Group Name
CVSS 3.5
CVE-2025-1795 LOW
CPython Email Header Injection via Address List Folding
Details
Vulnerabilities 446
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits