Description
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before inserting the input into an executable resource, such as a library, configuration file, or template.
Latest vulnerabilities for CWE-96
References
Description of CWE-96 on Mitre website