| Characters allowed between HTML attributes | 0x999-x | 4/10/2024 | XSS | 0 |
| Characters allowed between an object and bracket notation | cold-try | 4/15/2024 | JS | 0 |
| Characters allowed between an object and the dot operator | cold-try | 4/15/2024 | JS | 0 |
| Characters allowed between hostname and / but don't change the hostname | ThomasOrlita | 4/15/2024 | JS | 4 |
| Characters allowed between in operator | hackvertor | 4/3/2024 | JS | 0 |
 5 | Characters allowed between multiple HTML attributes | JorianWoltjer | 9/12/2024 | XSS | 2 |
3 | Characters allowed between slashes | hackvertor | 4/8/2024 | JS | 0 |
| Characters allowed between slashes using XSS type | hackvertor | 1/16/2025 | XSS | 0 |
25  25 | Characters allowed between variable name and equals sign | 0x999-x | 4/9/2024 | JS | 0 |
| Characters allowed in colon entity | InsertScript | 9/19/2024 | XSS | 0 |
| Characters allowed in path traversal | joaxcar | 8/26/2024 | JS | 0 |
| Characters allowed in-between hyphens | hackvertor | 4/14/2024 | XSS | 0 |
| Characters allowed in-between operators | hackvertor | 4/14/2024 | JS | 2 |
1 | Characters allowed instead of equal sign | c3l3si4n | 4/28/2024 | XSS | 0 |
3  3 | Characters allowed javascript and colon | renniepak | 4/9/2024 | JS | 3 |
4 | Characters allowed javascript and colon copy2 | avlidienbrunn | 9/29/2024 | JS | 0 |
3 | Characters allowed javascript and colon copy2 copy2 | PinkDraconian | 11/7/2024 | JS | 0 |
1 | Characters allowed to break double quotes | p3n7a90n | 6/30/2024 | XSS | 0 |
| Characters allowed to end a JS string | sqjor | 7/17/2024 | JS | 0 |
| Characters allowed within a hostname but don't change the hostname | ThomasOrlita | 4/30/2024 | JS | 1 |
