All VectorsVector nameUser Created Type Likes 106 106 106 106Named HTML entities that can be closed with !avlidienbrunn7/29/2025XSS2 6 6 6 6Characters allowed between HTML attributes0x999-x4/10/2024XSS0 1 1 1 1masato - braves parsing findingInsertScript8/3/2025XSS1 32 32 32 32Characters that can precede the javascript protocolrenniepak4/10/2024XSS4 1 1 1 1masato - braves parsing finding valid attributesInsertScript8/3/2025XSS1 1 1 1 1masato - braves parsing finding valid charactersInsertScript8/3/2025XSS1 1 1 1 1masato - braves parsing finding entity testInsertScript8/3/2025XSS1 7 7 7 7Closing title tag name separatorsola4569/15/2025XSS0 31 31 31 31Characters allowed after malformed entitieshackvertor7/1/2024XSS1 2 2 2 2List of HTML elements that convert to arbitrary stringjoaxcar4/10/2024XSS0 1 1 1 1Characters allowed in between @importbribes10/19/2025XSS0⚠ Browser differences 7 8 7 5XSS vectors that execute automatically hackvertor4/17/2024XSS0 5 5 5 5Characters allowed before after onerror eventst0xodile10/23/2025XSS1 6 6 6 6Chars allowed before style attribute...t0xodile10/25/2025XSS0⚠ Browser differences 34 35 34 34HTML elements that parse differently when renderedhackvertor4/19/2024XSS1 1 1 1 1chars before img tagst0xodile10/25/2025XSS0⚠ Browser differences 12.7k 12.7k 12.7k 12.7kCharacters after https URI scheme which prevent URL parsing of hrefCillian-Collins10/27/2025XSS1 7 7 7 7Characters allowed while closing script tagAyushXtha10/27/2025XSS3 14 14 14Active formatting elementsJorianWoltjer5/1/2024XSS0 1 1 1Characters that can break out of an inline style with single quotes0xdef1ant7/13/2024XSS0Found 253 recordsPage 12 of 13«45678910111213»