CWE-83 – Improper Neutralization of Script in Attributes in a Web Page
Description The software does not neutralize or incorrectly neutralizes "javascript:" or other URIs from dangerous attributes within tags, such as onmouseover, onload, onerror, or style....
