Common Weakness Enumeration

    CWE Definition / CWE-82

    CWE-82: Improper Neutralization of Script in Attributes of IMG Tags in a Web Page

    The web application does not neutralize or incorrectly neutralizes scripting elements within attributes of HTML IMG tags, such as the src attribute.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-83: Improper Neutralization of Script in Attributes in a Web Page