All VectorsVector nameUser Created Type Likes 31Characters allowed after greater than in eventshackvertor6/21/2024XSS0 30 30Characters allowed after equals sign for eventYouGina12/17/2024XSS1 2 2 2Characters allowed after colon which result in an external URLhackvertor1/16/2025XSS0 25 25 25Characters allowed after a biginthackvertor7/18/2025JS0 1 1 1Characters allowed after * in CSS commentshackvertor3/31/2024HTML0 16 16 16Characters after stringshackvertor4/3/2024JS0 12.7k 12.8k 12.7kCharacters after https URI scheme which prevent URL parsing of hrefCillian-Collins10/27/2025XSS1 30Characters Allowed Between Protocol // and localhost Where Host Still Equals localhostrootd4ddy3/2/2025JS0 1 1 1Character that closes HTML tagInsertScript4/2/2024HTML0 5 5 5Character allowed after onerror eventInsertScript4/2/2024XSS0 1 1CSS inline property definitionhipotermia3/12/2025HTML0 2Bytes that will scramble ISO-2022-JPCillian-Collins12/26/2024XSS1 2Bytes that will normalize ISO-2022-JPCillian-Collins12/26/2024XSS1Bypasses for __proto__ string matchvitorfhc8/29/2024JS0 1Bypass __proto__ string match defensevitorfhc8/29/2024JS0 4 4 4Break out of CSS stringshackvertor4/4/2024HTML0 10 10 11Attributes that are also DOM propertieshackvertor4/30/2024XSS0Attribute separatorstr3w5/6/2024HTML0 6 6 6Allowed characters right after tag name & before tag closure, no other characters in betweenhansmach1ne1/9/2025XSS0 116 79 123All properties on navigator (two levels of nesting deep)freddyb6/6/2024JS0Found 243 recordsPage 12 of 13«45678910111213»
