Tags that remove the span or are self closing
17
17
17
This checks if a tag removes the span or doesn't contain it.
Created by: hackvertor
Created on: Tuesday, July 16, 2024 at 8:00:42 PM
Updated on: Wednesday, September 18, 2024 at 2:38:49 PM
Vector type: XSS
Template used:
<$[data1] id=x><span></span></$[data1]>
Code used after fuzz:
!x.innerHTML.includes('<span>') && log('$[data1]')
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
<area id=x><span></span></area>
<base id=x><span></span></base>
<br id=x><span></span></br>
<embed id=x><span></span></embed>
<hr id=x><span></span></hr>
<img id=x><span></span></img>
<input id=x><span></span></input>
<link id=x><span></span></link>
<meta id=x><span></span></meta>
<param id=x><span></span></param>
<select id=x><span></span></select>
<source id=x><span></span></source>
<table id=x><span></span></table>
<textarea id=x><span></span></textarea>
<title id=x><span></span></title>
<track id=x><span></span></track>
<wbr id=x><span></span></wbr>
Fuzz results
Chrome 126.0.0.0 desktop macOS 10.15.7
Updated
Tue Jul 16 2024
Found 17 results
Data |
---|
area |
Data |
---|
base |
Data |
---|
br |
Data |
---|
embed |
Data |
---|
hr |
Data |
---|
img |
Data |
---|
input |
Data |
---|
link |
Data |
---|
meta |
Data |
---|
param |
Data |
---|
select |
Data |
---|
source |
Data |
---|
table |
Data |
---|
textarea |
Data |
---|
title |
Data |
---|
track |
Data |
---|
wbr |
Safari 17.4 desktop macOS 10.15.7
Updated
Tue Jul 16 2024
Found 17 results
Data |
---|
area |
Data |
---|
base |
Data |
---|
br |
Data |
---|
embed |
Data |
---|
hr |
Data |
---|
img |
Data |
---|
input |
Data |
---|
link |
Data |
---|
meta |
Data |
---|
param |
Data |
---|
select |
Data |
---|
source |
Data |
---|
table |
Data |
---|
textarea |
Data |
---|
title |
Data |
---|
track |
Data |
---|
wbr |
Firefox 128.0 desktop macOS 10.15
Updated
Tue Jul 16 2024
Found 17 results
Data |
---|
area |
Data |
---|
base |
Data |
---|
br |
Data |
---|
embed |
Data |
---|
hr |
Data |
---|
img |
Data |
---|
input |
Data |
---|
link |
Data |
---|
meta |
Data |
---|
param |
Data |
---|
select |
Data |
---|
source |
Data |
---|
table |
Data |
---|
textarea |
Data |
---|
title |
Data |
---|
track |
Data |
---|
wbr |