New answers tagged known-vulnerabilities
cant send a victim this link with the injected code This might be possible if you find that some input will populate the field. Try POST and GET requests for the page, and attempt to populate the field using either its name (if it has one), but also try id and other variations. Have a look at the rest of the application and see if there are any ...
Top 50 recent answers are included