CVE-2016-3709: Improper Neutralization of Input During Web Page Generation | Rapid7 Vulnerability Database