I ran a zap scan for my project and found some medium & low level vulnerabilities. But going through some posts, I found that we should run injections (sql, xss, command) on text fields also.
But running these injections on every text fields is a tedious task and takes most of the time. As per my understanding, if we run these injections on any one text field in each page should give the same vulnerable results instead of running on all text fields on that page for the project.
Please suggest if this approach makes any sense?