CWE-793
Only Filtering One Instance of a Special Element
The product receives data from an upstream component, but only filters a single instance of a special element before sending it to a downstream component.
Impactr finds and proves whether CWE-793 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.