CWE-86: Improper Neutralization of Invalid Characters in Identifiers in Web Pages

"The product does not neutralize or incorrectly neutralizes invalid characters or byte sequences in the middle of tag names, URI schemes, and other identifiers." - Entry from the Common Weakness Enumeration

For more info visit CWE-86