CWE-692

Incomplete Denylist to Cross-Site Scripting

High

Description

The product uses a denylist-based protection mechanism to defend against XSS attacks, but the denylist is incomplete, allowing XSS variants to succeed.

Potential Impact

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-692 vulnerabilities in your codebase.

Get Security Assessment