So I'm trying to evade a filter that escapes < and >.

I read that it's possible if the XSS gets injected inside a tag, but in my case, it gets injected between <span></span>.

Are there any methods that I should know about?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.