Common Weakness Enumeration
CWE Definition / CWE-84
CWE-84: Improper Neutralization of Encoded URI Schemes in a Web Page
The web application improperly neutralizes user-controlled input for executable script disguised with URI encodings.
Published:19 Jul 2006
Organization:MITRE
Modified:11 Dec 2025
Related Weakness
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
