Also known as “dirty” or “untrusted” input, unvalidated input may be any input that is sent to your server. Using such input without sanitizing it first is a security vulnerability that can be turned against you or your users.