I am trying work on an XSS scenario. Would appreciate if anyone can help.
"mydata" is landing in html as follows:
200 OK ... Content-Type: text/html; charset=utf-8 ... ... <select> <option value="mydata"> Anything</option> </select> ......
Since the "mydata" is in URL I cannot use a payload with forward slashes. Thus, I am not able to use script tag to execute script since I am unable to close it without forward slash. Other payloads like
<BODY ONLOAD=alert('XSS')> are not working with options tag.
Does anyone know a way to introduce xss in this scenario?