CWE-75
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
The product does not adequately filter user-controlled input for special elements with control implications.
Impactr finds and proves whether CWE-75 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.