Skip to content

XXS

injection point 0 

<div>
{name} {surname}
</div>

name = q6aac3dhg6
surname = ezugq6xiyg

<div>
q6aac3dhg6 ezugq6xiyg
</div>

injection point 1 

<div>
{name} {surname}
</div>

name = <script>alert(1)</script>
surname = szalkowski

<div>
<script>alert(1)</script> szalkowski
</div>

injection point 2 

<div id="{name}">
 {surname}
</div>

name = 1"></div><script>alert(1)</script><div id="2
surname = szalkowski

<div id="1"></div><script>alert(1)</script><div id="2">
 szalkowski
</div>