Common Weakness Enumeration

    CWE Definition / CWE-85

    CWE-85: Doubled Character XSS Manipulations

    The web application does not filter user-controlled input for executable script disguised using doubling of the involved characters.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    CWE-675: Multiple Operations on Resource in Single-Operation Context