Vuledap (from “Vulnerable Educational Application”) is a set of simple applications for demonstrating common types of vulnerabilities.
Based on post: https://avleonov.com/2018/11/29/making-vulnerable-web-applications-xxs-rce-sql-injection-and-stored-xss-buffer-overflow/