Quotes

yes

Novice Fuzzer

Created bydogspyagent

The fuzzing network isn't running this vector

Reported as broken by 2 engines (Blink, Gecko) with no successful result. Editing the template, init or after code, type, charset or data references puts it back on the network.

Created Jul 13, 2024

Updated Aug 13, 2026

Unable to render tweet button

Detecting browser...

CategoryHTML Parsing

VisibilityPublic

TypeXSS

CharsetUTF-8

Template used:

<img src="$[chr]<iframe><!--">

Code used after fuzz:

if (document.querySelector('iframe')) {0x0D
    log(String.fromCharCode($[i]))0x0D
}

Sample payloads

<img src="0x00<iframe><!--">

Distributed Fuzzing

Quotes

Sample payloads

Fuzz results