All VectorsVector nameUser Created Type Likes 2 2 2 2Characters allowed after colon which result in an external URLhackvertor1/16/2025XSS0⚠ Browser differences 48 48 48 32Characters allowed after slashes which result in an external URL hackvertor1/16/2025XSS0 1 1 1Chars allowed before domaint0xodile9/24/2024XSS0 34 34 34 34Characters allowed before slashes which result in an external URLhackvertor1/16/2025XSS1 4 4 4 4Entities allowed before slashes which result in an external URLhackvertor1/16/2025XSS0 32 32 32 32Characters allowed before the JavaScript protocolhackvertor1/16/2025XSS0⚠ Browser differences 1 1 1 2characters after slash that make a http protocolInsertScript4/3/2024XSS0⚠ Browser differences 2 4 2framers event executorsweizman4/10/2024XSS0 2 2 2 2Malformed HTML commentshackvertor1/17/2025XSS0 108 108 108 108Tags that get reordered in the DOMhackvertor1/21/2025XSS0 3 3 3 3Characters that can be inside the javascript protocolhipotermia1/22/2025XSS0 14 14 14 14Tags that get moved out of parenthackvertor1/22/2025XSS0⚠ Browser differences 105 106 105Tags that support HTML commentshackvertor1/26/2025XSS0⚠ Browser differences 6 5 6 5Tags that DO NOT support HTML commentshackvertor1/26/2025XSS0 127 127 127HTML TAGS ListsY4tacker1/3/2025XSS0 1 1 1Entities in-between square brackets that close cdatahackvertor10/8/2024XSS1 1 1 1Characters ending XML Processing Instructions (WIP)ola4562/4/2025XSS0 5 5 5Chars allowed between src and = in img tagrootd4ddy3/2/2025XSS0 4 4 4Characters allowed before the JavaScript protocol colonRemakingEden3/3/2025XSS0⚠ Browser differences 45.4k 56.7k 45.4k 62.5kCharacters that cause the backslash to be consumed with a big5 charsethackvertor11/1/2024XSS0Found 248 recordsPage 10 of 13«45678910111213»
