Glossary
SSTI (Server-Side Template Injection)
A vulnerability that allows injecting code into server-side template engines (Jinja2, Twig, Blade). SSTI occurs when user data is inserted directly into a template without sanitization. It can lead to file reading, system command execution, and full server compromise.