Email Injection is a type of input validation vulnerability in which an attacker exploits insufficient sanitization of user-supplied data to insert malicious content into email headers or bodies, thereby subverting the intended email communication mechanism.