A vulnerability that allows for code to be inserted without direct access to credentials.