CWE-174 (对同一数据的双重编码) — Vulnerability Class 7

This page aggregates vulnerability data specifically for the weakness type CWE-174, known as Improper Neutralization of Special Elements in Output Data for HTML Contexts, which corresponds to Cross-Site Scripting (XSS). The collection encompasses a comprehensive range of security advisories and technical reports detailing this specific flaw across numerous software vendors and products, covering incidents reported from the inception of the Common Vulnerabilities and Exposures database through the most recent disclosures. Visitors can utilize this resource to track how specific vendors address this class of injection flaws over time, gain a deeper understanding of the technical characteristics and mitigation strategies associated with improper output encoding, or review the complete historical vulnerability record for a particular product to assess its long-term security posture. By centralizing these disparate reports, the page facilitates efficient analysis of trends in XSS exploitation and helps security professionals identify patterns in how different software ecosystems handle output sanitization failures without requiring manual searches across multiple external databases.