CWE CWE-652 – Improper Neutralization of Data within XQuery Expressions (‘XQuery Injection’) May 26, 2022 rocco