RAGTAGS

Injection happens when untrusted input is sent to a system interpreter (like SQL, shell, or HTML) without proper validation or escaping. This lets attackers modify commands and potentially take control.