Tags that get reordered in the DOM

108

This vector shows which tags when nested reorder the DOM.

Created by: hackvertor

Created on: Tuesday, January 21, 2025 at 12:56:30 PM

Updated on: Tuesday, May 27, 2025 at 1:48:05 PM

Vector type: XSS

Vector charset: UTF-8

Vector data 1: html

Vector data 2: html

Template used:

<div id=x>
<$[data1]><$[data2]></$[data2]></$[data1]>
</div>

Code used after fuzz:

"$[data1]" != "$[data2]" && x.innerHTML.trim().startsWith("<$[data2]>") && x.innerHTML.trim().includes("<$[data1]>") && log('$[data1]->$[data2]')

Your browser was detected as:

Detecting... Detecting... Detecting... Detecting...

Sample payloads

<div id=x>
<table->a><></></table->a>
</div>

<div id=x>
<table->abbr><></></table->abbr>
</div>

<div id=x>
<table->acronym><></></table->acronym>
</div>

<div id=x>
<table->address><></></table->address>
</div>

<div id=x>
<table->area><></></table->area>
</div>

<div id=x>
<table->article><></></table->article>
</div>

<div id=x>
<table->aside><></></table->aside>
</div>

<div id=x>
<table->audio><></></table->audio>
</div>

<div id=x>
<table->b><></></table->b>
</div>

<div id=x>
<table->base><></></table->base>
</div>

<div id=x>
<table->bdi><></></table->bdi>
</div>

<div id=x>
<table->bdo><></></table->bdo>
</div>

<div id=x>
<table->big><></></table->big>
</div>

<div id=x>
<table->blockquote><></></table->blockquote>
</div>

<div id=x>
<table->br><></></table->br>
</div>

<div id=x>
<table->button><></></table->button>
</div>

<div id=x>
<table->canvas><></></table->canvas>
</div>

<div id=x>
<table->center><></></table->center>
</div>

<div id=x>
<table->cite><></></table->cite>
</div>

<div id=x>
<table->code><></></table->code>
</div>