CSS Injection is a web security vulnerability that occurs when an attacker can inject malicious CSS (Cascading Style Sheets) code into a web application.