Categoría: Cross-site scripting

Stored DOM XSS

Reflected DOM XSS

DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encoded

DOM XSS in document.write sink using source location.search inside a select element

Reflected XSS into a JavaScript string with angle brackets HTML encoded

Stored XSS into anchor href attribute with double quotes HTML-encoded

Reflected XSS into attribute with angle brackets HTML-encoded

DOM XSS in jQuery selector sink using a hashchange event

DOM XSS in jQuery anchor href attribute sink using location.search source

DOM XSS in innerHTML sink using source location.search