> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Xpath taint low

<AccordionGroup>
  <Accordion title="xpath-taint-low">
    XPath queries are constructed dynamically on user-controlled input. This could lead to XPath injection if variables passed into the evaluate or compile commands are not properly sanitized. Xpath injection could lead to unauthorized access to sensitive information in XML documents. Thoroughly sanitize user input or use parameterized XPath queries if you can.<br />**Likelihood**: MEDIUM<br />**Confidence**: LOW<br />**CWE**: <br />- CWE-643: Improper Neutralization of Data within XPath Expressions ('XPath Injection')
    <br />**OWASP**: <br />- A03:2021 - Injection
  </Accordion>
</AccordionGroup>