All VectorsVector nameUser Created Type Likes 31 31 31 31Characters allowed after malformed entitieshackvertor7/1/2024XSS1⚠ Browser differences 80 80 80 64Characters allowed after hostname but don't change the hostnameThomasOrlita4/15/2024JS2 31 31 31 31Characters allowed after greater than in eventshackvertor6/21/2024XSS0 30 30 30Characters allowed after equals sign for eventYouGina12/17/2024XSS1 2 2 2 2Characters allowed after colon which result in an external URLhackvertor1/16/2025XSS0 25 25 25 25Characters allowed after a biginthackvertor7/18/2025JS0 1 1 1 1Characters allowed after * in CSS commentshackvertor3/31/2024HTML0 16 16 16 16Characters after stringshackvertor4/3/2024JS0⚠ Browser differences 12.7k 12.7k 12.7k 12.7kCharacters after https URI scheme which prevent URL parsing of hrefCillian-Collins10/27/2025XSS1 7 7 7 7Characters Supported in </script> Tagsghannu0x012/10/2026XSS0 46 46 46Characters Allowed Between Protocol // and localhost Where Host Still Equals localhostrootd4ddy3/2/2025JS0 1 1 1 1Character that closes HTML tagInsertScript4/2/2024HTML0 5 5 5 5Character allowed after onerror eventInsertScript4/2/2024XSS0 1 1 1CSS inline property definitionhipotermia3/12/2025HTML0 2 2 2Bytes that will scramble ISO-2022-JPCillian-Collins12/26/2024XSS1 2 2 2Bytes that will normalize ISO-2022-JPCillian-Collins12/26/2024XSS1 1 1 1Bypasses for __proto__ string matchvitorfhc8/29/2024JS0 1 1 1Bypass __proto__ string match defensevitorfhc8/29/2024JS0 4 4 4 4Break out of CSS stringshackvertor4/4/2024HTML0⚠ Browser differences 20 20 20 10Attributes that are also DOM propertieshackvertor4/30/2024XSS0Found 246 recordsPage 12 of 13«45678910111213»
