Expression Language Injection is a type of code injection vulnerability in which an attacker injects malicious input into an expression language interpreter, enabling unauthorized execution of arbitrary expressions within the application's runtime context.