    public static function page($vars) {
        switch (SMART_URL) {
            case true:
                # code...
                $url = Site::$url."/".self::slug($vars).GX_URL_PREFIX;
                break;
            
            default:
                # code...
                $url = Site::$url."/index.php?page={$vars}";
                break;

        }

        return $url;
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.