Is it possible to get XSS in the value field of Input tag when the application filters out double quote?
<input type="hidden" name="something" id="somenthing" value="my_input_goes_here">
input from request goes inside the value field , so i tried to close it with
" and give a payload like
" accesskey="X" onclick="alert(1)" but
" is filtered out.
So any XSS vector possible in this scenario?