Shazzer logo

Mutated XSS Attributes

Chrome logo 1.1k

Hello, world!

Created by: IDKdir

Created on: Saturday, July 13, 2024 at 10:07:17 PM

Updated on: Tuesday, May 27, 2025 at 10:43:42 AM


Category: HTML Parsing

Vector visibility: Public

Vector type: XSS

Vector charset: UTF-8

Vector data 1: html

Vector data 2: html

Template used:
<$[data1]><$[data2] title="</$[data1]><aaa>">
Code used after fuzz:
if (document.querySelector('aaa')) {0x0D
    log('<$[data1]><$[data2] src="</$[data1]>">')0x0D
}
Detecting browser...

Sample payloads

<<iframe><a src="</iframe>">>< title="</<iframe><a src="</iframe>">><aaa>">
<<iframe><abbr src="</iframe>">>< title="</<iframe><abbr src="</iframe>">><aaa>">
<<iframe><acronym src="</iframe>">>< title="</<iframe><acronym src="</iframe>">><aaa>">
<<iframe><address src="</iframe>">>< title="</<iframe><address src="</iframe>">><aaa>">
<<iframe><area src="</iframe>">>< title="</<iframe><area src="</iframe>">><aaa>">
<<iframe><article src="</iframe>">>< title="</<iframe><article src="</iframe>">><aaa>">
<<iframe><aside src="</iframe>">>< title="</<iframe><aside src="</iframe>">><aaa>">
<<iframe><audio src="</iframe>">>< title="</<iframe><audio src="</iframe>">><aaa>">
<<iframe><b src="</iframe>">>< title="</<iframe><b src="</iframe>">><aaa>">
<<iframe><base src="</iframe>">>< title="</<iframe><base src="</iframe>">><aaa>">
<<iframe><bdi src="</iframe>">>< title="</<iframe><bdi src="</iframe>">><aaa>">
<<iframe><bdo src="</iframe>">>< title="</<iframe><bdo src="</iframe>">><aaa>">
<<iframe><big src="</iframe>">>< title="</<iframe><big src="</iframe>">><aaa>">
<<iframe><blockquote src="</iframe>">>< title="</<iframe><blockquote src="</iframe>">><aaa>">
<<iframe><body src="</iframe>">>< title="</<iframe><body src="</iframe>">><aaa>">
<<iframe><br src="</iframe>">>< title="</<iframe><br src="</iframe>">><aaa>">
<<iframe><button src="</iframe>">>< title="</<iframe><button src="</iframe>">><aaa>">
<<iframe><canvas src="</iframe>">>< title="</<iframe><canvas src="</iframe>">><aaa>">
<<iframe><caption src="</iframe>">>< title="</<iframe><caption src="</iframe>">><aaa>">
<<iframe><center src="</iframe>">>< title="</<iframe><center src="</iframe>">><aaa>">

Fuzz results

Chrome logo
Chrome 144.0.0.0 desktop Windows NT 10.0

Updated

Sat Jan 31 2026
Found 1143 results
Loading...
Chrome logo
Chrome 143.0.0.0 desktop macOS 10.15.7older version

Updated

Tue Jan 13 2026
Found 1143 results
Loading...