⚠️ 03 — Cross-Site Scripting (XSS)

Easy Medium Hard
Easy Medium Hard
0/3 solved

🪞 Easy — Reflected XSS

The search box renders user input directly into HTML. Inject a script tag to get the flag.

Try <script>alert(1)</script> as your search query. The input is rendered directly via render_template_string.