HTML tags and attributes that can be used to access the URL

This vector shows which html tags/attributes can be used to access the url of the current page

Created by: 0x999-x

Created on: Monday, November 4, 2024 at 9:47:00 AM

Updated on: Tuesday, May 27, 2025 at 1:48:59 PM

Vector type: XSS

Vector charset: UTF-8

Vector data 1: html

Vector data 2: attributes

Template used:
<$[data1] id="x" $[data2]="#">

Code used after fuzz:
if(x.$[data2].includes("shazzer")){log('$[data1] $[data2]')}

Your browser was detected as:

Detecting... Detecting... Detecting... Detecting...

Sample payloads

<a:href id="x" ="#"><area:href id="x" ="#"><audio:src id="x" ="#"><base:href id="x" ="#"><blockquote:cite id="x" ="#"><del:cite id="x" ="#"><embed:src id="x" ="#"><form:action id="x" ="#"><iframe:src id="x" ="#"><img:src id="x" ="#"><input:src id="x" ="#"><ins:cite id="x" ="#"><link:href id="x" ="#"><object:data id="x" ="#"><q:cite id="x" ="#"><script:src id="x" ="#"><source:src id="x" ="#"><track:src id="x" ="#"><video:poster id="x" ="#"><video:src id="x" ="#">