CWE-79: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting is a software weakness pattern tracked by CWE 79. The local starter record is replaced by the official MITRE CWE import when the sync pipeline runs.
CWE Reference
CWE for php
Browse cwe for php with official CWE context and Glexia analysis.
Release starter-2026-05listing
Search And Filters
Browse CWE records
CWE-89: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection is a software weakness pattern tracked by CWE 89. The local starter record is replaced by the official MITRE CWE import when the sync pipeline runs.
CWE-78: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection is a software weakness pattern tracked by CWE 78. The local starter record is replaced by the official MITRE CWE import when the sync pipeline runs.
CWE-22: Improper Limitation of a Pathname to a Restricted Directory
Path Traversal is a software weakness pattern tracked by CWE 22. The local starter record is replaced by the official MITRE CWE import when the sync pipeline runs.
CWE-352: Cross-Site Request Forgery
Cross-Site Request Forgery is a software weakness pattern tracked by CWE 352. The local starter record is replaced by the official MITRE CWE import when the sync pipeline runs.