Common Weakness Enumeration

    CWE Definition / CWE-87

    CWE-87: Improper Neutralization of Alternate XSS Syntax

    The product does not neutralize or incorrectly neutralizes user-controlled input for alternate script syntax.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')