Script injection is a type of security vulnerability where an attacker is able to execute malicious scripts in a trusted context, often due to improper input validation or output encoding. This can lead to unauthorized actions, data theft, or compromising the integrity of a web application.