CWE-116
Improper Encoding or Escaping of Output
The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.
Impactr finds and proves whether CWE-116 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.