Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Weakness · CWE-80
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "CWE-80",
"title": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
"type": "Weakness",
"source_url": "https://cwe.mitre.org/data/definitions/80.html",
"snapshot": "cwe.xml",
"status": "Incomplete",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"abstraction": "Variant",
"source_version": "4.20"
}Explicit source assertions (4)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
CAPEC-18 → related_weakness → CWE-80
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='18']/Related_Weaknesses
CAPEC-193 → related_weakness → CWE-80
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='193']/Related_Weaknesses
CAPEC-32 → related_weakness → CWE-80
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='32']/Related_Weaknesses
CAPEC-86 → related_weakness → CWE-80
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='86']/Related_Weaknesses