2 deleted 103 characters in body
source | link

Although this is HTML injection, this vulnerability is no longer XSS in the majority of browsers. This is because the element is invisible and there are very fewno event handlers that can be attached to this HTMLwill trigger on a hidden input element to execute JavaScript.

There is one, in Opera you can use this: 

" onformchange=alert(1) "

Although this is HTML injection, this vulnerability is no longer XSS in the majority of browsers. This is because the element is invisible and there are very few event handlers that can be attached to this HTML element to execute JavaScript.

There is one, in Opera you can use this:

" onformchange=alert(1) "

Although this is HTML injection, this vulnerability is no longer XSS in the majority of browsers. This is because the element is invisible and there are no event handlers that will trigger on a hidden input element. 

1
source | link

Although this is HTML injection, this vulnerability is no longer XSS in the majority of browsers. This is because the element is invisible and there are very few event handlers that can be attached to this HTML element to execute JavaScript.

There is one, in Opera you can use this:

" onformchange=alert(1) "