Tags that get reordered in the DOM



This vector shows which tags when nested reorder the DOM.
Created by: hackvertor
Created on: Tuesday, January 21, 2025 at 12:56:30 PM
Updated on: Tuesday, February 18, 2025 at 5:18:30 AM
Vector type: XSS
Vector charset: UTF-8
Template used:
<div id=x>
<$[data1]><$[data2]></$[data2]></$[data1]>
</div>
Code used after fuzz:
"$[data1]" != "$[data2]" && x.innerHTML.trim().startsWith("<$[data2]>") && x.innerHTML.trim().includes("<$[data1]>") && log('$[data1]->$[data2]')
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
<div id=x>
<table->a><></></table->a>
</div>
<div id=x>
<table->abbr><></></table->abbr>
</div>
<div id=x>
<table->acronym><></></table->acronym>
</div>
<div id=x>
<table->address><></></table->address>
</div>
<div id=x>
<table->area><></></table->area>
</div>
<div id=x>
<table->article><></></table->article>
</div>
<div id=x>
<table->aside><></></table->aside>
</div>
<div id=x>
<table->audio><></></table->audio>
</div>
<div id=x>
<table->b><></></table->b>
</div>
<div id=x>
<table->base><></></table->base>
</div>
<div id=x>
<table->bdi><></></table->bdi>
</div>
<div id=x>
<table->bdo><></></table->bdo>
</div>
<div id=x>
<table->big><></></table->big>
</div>
<div id=x>
<table->blockquote><></></table->blockquote>
</div>
<div id=x>
<table->br><></></table->br>
</div>
<div id=x>
<table->button><></></table->button>
</div>
<div id=x>
<table->canvas><></></table->canvas>
</div>
<div id=x>
<table->center><></></table->center>
</div>
<div id=x>
<table->cite><></></table->cite>
</div>
<div id=x>
<table->code><></></table->code>
</div>
Fuzz results

Chrome 132.0.0.0 desktop macOS 10.15.7
Updated
Wed Jan 22 2025
Found 108 results
Loading...

Firefox 134.0 desktop macOS 10.15
Updated
Wed Jan 22 2025
Found 108 results
Loading...

Safari 18.2 desktop macOS 10.15.7
Updated
Wed Jan 22 2025
Found 108 results
Loading...