Common Weakness Enumeration

    CWE Definition / CWE-116

    CWE-116: Improper Encoding or Escaping of Output

    The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:30 Apr 2026

    Related Weakness

    CWE-707: Improper Neutralization

    CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')