SQL Injection is a type of attack where an attacker can execute arbitrary SQL code on a database by injecting malicious input through an application’s input fields. It can be mitigated by using prepared statements, parameterized queries, and input validation to sanitize user inputs.