All VectorsVector nameUser Created Type Likes 53 53 53 53Characters allowed as start of HTML tag nameJorianWoltjer1/30/2026XSS0⚠ Browser differences 1.4k 1.4k 1.4k 1.4kUnicode "Latin" characters using \p{scx=Latin} RegExJorianWoltjer12/5/2025JS0 65 65 65 65Characters matching RegEx /\w/uiJorianWoltjer12/5/2025JS1 1 1 1Characters that change length on .toLowerCase()JorianWoltjer4/11/2024JS1 1 1 1Entities allowed between two forward slashesInsertScript9/19/2024XSS1 1 1 1Characters allowed in colon entityInsertScript9/19/2024XSS0 1 1 1 1Character that closes HTML tagInsertScript4/2/2024HTML0 1 1 1 1masato - braves parsing finding valid attributesInsertScript8/3/2025XSS1 1 1 1characters allowed between exclamation mark and greater then InsertScript6/18/2024HTML0 1 1 1 1masato - braves parsing finding valid charactersInsertScript8/3/2025XSS1 25 25 25 25characters between function name and parenthesesInsertScript11/3/2025JS0 47 47 47Characters appended at the end of TLD within URL, which yield in the same host propertyInsertScript1/10/2025JS0 46 46 46Characters prepended to URL, which yield in the same host propertyInsertScript1/10/2025JS0 1 1 1Characters prepended to URL host. check if difference between URL and a tagInsertScript1/10/2025JS0⚠ Browser differences 1 1 1 2characters after slash that make a http protocolInsertScript4/3/2024XSS0 5 5 5 5Character allowed after onerror eventInsertScript4/2/2024XSS0 1 1 1 1masato - braves parsing finding entity testInsertScript8/3/2025XSS1 1 1 1 1masato - braves parsing findingInsertScript8/3/2025XSS1 16 16 16 16JavaScript separators between function namesInsertScript4/2/2024JS0 1 1 1HTML-Encoded Attribute EscapeIDKdir7/13/2024XSS0Found 245 recordsPage 11 of 13«45678910111213»
