Common Weakness Enumeration

    CWE Definition / CWE-81

    CWE-81: Improper Neutralization of Script in an Error Message Web Page

    The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters that could be interpreted as web-scripting elements when they are sent to an error page.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    CWE-209: Generation of Error Message Containing Sensitive Information

    CWE-390: Detection of Error Condition Without Action