Characters allowed in between start of HTML tag name and event handler
6
6
6
6Characters allowed in between start of HTML tag name and event handler
Created byAyushXtha
Created Mar 4, 2026
Updated Mar 4, 2026
Detecting browser...
CategoryHTML Parsing
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<a$[chr]id="test">Code used after fuzz:
document.getElementById('test') && log(i)Sample payloads
<a0x09id="test"><a
id="test"><a0x0Cid="test"><a0x0Did="test"><a id="test"><a/id="test">Fuzz results
Chrome 148.0.0.0 desktop Windows NT 10.0
Updated15 Mar 2026
Found 6 results
Loading...
Chrome 146.0.0.0 desktop macOS 10.15.7older version
Updated9 Mar 2026
Found 6 results
Loading...
Chrome 145.0.0.0 desktop Linuxolder version
Updated9 Mar 2026
Found 6 results
Loading...
Firefox 150.0 desktop macOS 10.15
Updated14 Mar 2026
Found 6 results
Loading...
Firefox 148.0 desktop Linux Unknownolder version
Updated5 Mar 2026
Found 6 results
Loading...
Microsoft Edge 146.0.0.0 desktop Windows NT 10.0
Updated21 Mar 2026
Found 6 results
Loading...
Safari 26.0.1 mobile iOS 18.7
Updated4 Mar 2026
Found 6 results
Loading...