⚠️ 03 — Cross-Site Scripting (XSS)

Easy Medium Hard
Easy Medium Hard
0/3 solved

💾 Medium — Stored XSS

Post a comment containing JavaScript. When viewed, it executes — affecting every visitor.

Comments:

bob
The dark theme is awesome.
alice
Great platform! Excited to learn.
Post a comment containing <script>alert(1)</script> or <img src=x onerror=alert(1)>. The |safe filter renders it as raw HTML.