I am trying work on an XSS scenario. Would appreciate if anyone can help.
URL: www.example.com/mydata
"mydata" is landing in html as follows:
200 OK
...
Content-Type: text/html; charset=utf-8
...
...
<select>
<option value="mydata"> Anything</option>
</select>
......
Since the "mydata" is in URL I cannot use a payload with forward slashes. Thus, I am not able to use script tag to execute script since I am unable to close it without forward slash. Other payloads like <BODY ONLOAD=alert('XSS')>
are not working with options tag.
Does anyone know a way to introduce xss in this scenario?