Common Weakness Enumeration
CWE Definition / CWE-692
CWE-692: Incomplete Denylist to Cross-Site Scripting
The product uses a denylist-based protection mechanism to defend against XSS attacks, but the denylist is incomplete, allowing XSS variants to succeed.
Published:11 Apr 2008
Organization:MITRE
Modified:11 Dec 2025
