CWE-104
Struts: Form Bean Does Not Extend Validation Class
If a form bean does not extend an ActionForm subclass of the Validator framework, it can expose the application to other weaknesses related to insufficient input validation.
Impactr finds and proves whether CWE-104 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.