Improper neutralization of input during web page generation ('Cross-site Scripting').
MITRE. (n.d.). Common Weakness Enumeration (CWE).