Is it possible to get XSS in the value field of Input tag when the application filters out double quote?
<input type="hidden" name="something" id="somenthing" value="my_input_goes_here">
input from request goes inside the value field , so i tried to close it with "
and give a payload like " accesskey="X" onclick="alert(1)"
but "
is filtered out.
So any XSS vector possible in this scenario?