CWE-82
Improper Neutralization of Script in Attributes of IMG Tags in a Web Page
The web application does not neutralize or incorrectly neutralizes scripting elements within attributes of HTML IMG tags, such as the src attribute.
Impactr finds and proves whether CWE-82 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.