HTML tags and attributes that can be used to access the URL

Chrome logo 20

This vector shows which html tags/attributes can be used to access the url of the current page

Created by: 0x999-x

Created on: Monday, November 4, 2024 at 9:47:00 AM

Updated on: Monday, December 30, 2024 at 10:43:50 AM

Vector type: XSS

Vector charset: UTF-8

Template used:
<$[data1] id="x" $[data2]="#">
Code used after fuzz:
if(x.$[data2].includes("shazzer")){log('$[data1] $[data2]')}
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<a:href id="x" ="#">
<area:href id="x" ="#">
<audio:src id="x" ="#">
<base:href id="x" ="#">
<blockquote:cite id="x" ="#">
<del:cite id="x" ="#">
<embed:src id="x" ="#">
<form:action id="x" ="#">
<iframe:src id="x" ="#">
<img:src id="x" ="#">
<input:src id="x" ="#">
<ins:cite id="x" ="#">
<link:href id="x" ="#">
<object:data id="x" ="#">
<q:cite id="x" ="#">
<script:src id="x" ="#">
<source:src id="x" ="#">
<track:src id="x" ="#">
<video:poster id="x" ="#">
<video:src id="x" ="#">

Fuzz results

Chrome logo
Chrome 130.0.0.0 desktop Windows NT 10.0

Updated

Mon Nov 04 2024
Found 20 results
Loading...