Should be used only for injection attacks where there is no more specific injection tag available.
- For XSS attacks, use xss, not injection.
- For SQL injection attacks, use sql-injection, not injection.
- For path injection attacks, use path-injection, not injection.
- For other injection-style attacks that do not have a more specific tag, you could use injection. For example, you might use injection on a question about a command injection attack.