Browse / Cross-site Scripting

Cross-site Scripting

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Cross-site Scripting (XSS) - Generic1,048
• Cross-site Scripting (XSS) - Reflected674
• Cross-site Scripting (XSS) - Stored663
• Cross-site Scripting (XSS) - DOM182
• Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)17
• Cross-Site Scripting (XSS)2
• Reflected XSS1

Often found together with

• Cross-Site Request Forgery148
• Authentication125
• Misconfiguration122
• Information Disclosure120
• Code Execution86
• Access Control72
• Injection and Smuggling52
• Open Redirect48

Most upvoted Cross-site Scripting reports

AllValidInformativeN/ADuplicate

1. XSS At "pages.et.uber.com"N/ACross-site Scripting (XSS) - Generic · Uber
   267 votes
2. Unauthenticated Stored xss N/ACross-site Scripting (XSS) - Generic · Nextcloud
   14 votes
3. runs javascript on powershell when it shouldntN/AImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) · curl
   12 votes
4. XSSN/ACross-site Scripting (XSS) - Generic · Reddit
   10 votes
5. XSS in redditmedia.com can compromise data of reddit.comN/ACross-site Scripting (XSS) - Stored · medium · Reddit
   10 votes
6. Stored XSS on Wordpress 5.3 via Title PostN/ACross-site Scripting (XSS) - Stored · high · WordPress
   9 votes
7. self xss inN/ACross-site Scripting (XSS) - Generic · medium · Quora
   7 votes
8. Double linking cause XSS (but blokeced by CSP in gitlab.com)N/ACross-site Scripting (XSS) - DOM · low · GitLab
   6 votes
9. HTML injection-WordCamp Talks pluginN/ACross-site Scripting (XSS) - Generic · medium · Ian Dunn
   6 votes
10. Email HTML injection N/ACross-site Scripting (XSS) - Generic · low · BlockDev Sp. Z o.o
    5 votes
11. Reflected XSS via File UploadN/ACross-site Scripting (XSS) - Reflected · medium · Reddit
    4 votes
12. stored SELF xss on Basic Google Maps Placemarks Settings pluginN/ACross-site Scripting (XSS) - Generic · Ian Dunn
    4 votes
13. XSS in Tagregator pluginN/ACross-site Scripting (XSS) - Generic · Ian Dunn
    4 votes
14. CVE-2020-11022N/ACross-site Scripting (XSS) - Reflected · medium · Reddit
    3 votes
15. Corsa Site Scripting Vulnerability (XSS)N/ACross-site Scripting (XSS) - Reflected · high · Linux Foundation Decentralized Trust
    3 votes
16. Reflected Xss bypass Content-Type: text/plain N/ACross-site Scripting (XSS) - Reflected · medium · Python Cryptographic Authority
    3 votes
17. Cross site scripting (content-sniffing)N/ACross-site Scripting (XSS) - DOM · Liberapay
    3 votes
18. Reflected XSS in admin settingsN/ACross-site Scripting (XSS) - Reflected · high · Deconf
    1 votes
19. Google Authenticator - Cross Site ScriptingN/ACross-site Scripting (XSS) - Generic · Ian Dunn
    1 votes