CWE-87
Improper Neutralization of Alternate XSS Syntax
The product does not neutralize or incorrectly neutralizes user-controlled input for alternate script syntax.
Impactr finds and proves whether CWE-87 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.