# General Information
The security risk Injection describes the injection of code into existing commands with the intent to change their behaviour. This includes attacks such as SQL & NoSQL injections, but also JavaScript injections as in Cross-Site Scripting attacks.
A03:2021