Reflecting...

Quotes

yes

Novice Fuzzer

Created bydogspyagent

The fuzzing network isn't running this vector

Reported as broken by 2 engines (Blink, Gecko) with no successful result. Editing the template, init or after code, type, charset or data references puts it back on the network.

Created Jul 13, 2024

Updated Sep 5, 2026

Unable to render tweet button

Detecting browser...

CategoryHTML Parsing

VisibilityPublic

TypeXSS

CharsetUTF-8

Template used:

<img src="$[chr]<iframe><!--">

Code used after fuzz:

if (document.querySelector('iframe')) {
    log(String.fromCharCode($[i]))
}