The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page served to other users.
CWE-79 (Cross-site Scripting (XSS)) is classified as high severity and falls under the OWASP Top 10 category A03:2021.
The official CWE entry is maintained by MITRE at cwe.mitre.org/data/definitions/79.html.
Orbis AppSec automatically detects and fixes Cross-site Scripting (XSS) vulnerabilities in your code with AI-powered static analysis.