What MITRE CAPEC-243: XSS Targeting HTML Attributes (Detailed Attack Pattern - Medium Severity) requires
MITRE CAPEC-243 (XSS Targeting HTML Attributes) is a detailed-level attack pattern in the MITRE Common Attack Pattern Enumeration and Classification. An adversary inserts commands to perform cross-site scripting (XSS) actions in HTML attributes. Many filters do not adequately sanitize attributes against the presence of potentially dangerous commands even if they adequately sanitize tags. For example, dangerous expressions could be inserted into a style attribute in an anchor tag, resulting in the execution of malicious code when the resulting page is rendered. Likelihood of attack: Unknown. Typical severity: Medium. Maps to weaknesses CWE-83.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://capec.mitre.org/data/definitions/243.html
SHA-256 integrity: c979b2332f795cb4668439f13f3150e380ef5c1a5125e3058c2e8b9d7aa56246
Primary Citations — 7 traced to source
- MITRE CAPEC-243: XSS Targeting HTML Attributes (https://capec.mitre.org/data/definitions/243.html)
- CWE-83: underlying weakness (http://cwe.mitre.org/data/definitions/83.html)
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/mitre-capec-capec-243-xss-targeting-html-attributes.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/mitre-capec-capec-243-xss-targeting-html-attributes.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/mitre-capec-capec-243-xss-targeting-html-attributes
- Back to registry: Browse all 10,085 compliance nodes