The software does not properly distinguish between different
					types of elements in a way that leads to insecure
					behavior.