Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and single quotes and backslash escaped

$ tldr PortSwigger · Cross-Site Scripting (XSS)

·	·
Plataforma	PortSwigger Web Security Academy
Tema	Cross-Site Scripting (XSS)
Dificultad	PRACTITIONER
Lab oficial	Abrir

Resolver el lab

Idioma	Autor	Formato	Enlace
🇬🇧 EN	PortSwigger	Texto	Abrir
🇬🇧 EN	z3nsh3ll	Vídeo	Abrir

Recursos por skill

Skill	Fuente	Enlace
Cross-Site Scripting (XSS)	HackTricks	Abrir
Cross-Site Scripting (XSS)	PortSwigger	Abrir

Skills relacionadas

Cross-Site Scripting (XSS)

Comentarios y truquillos

¿Has resuelto el lab por una vía distinta? Compártela aquí — los comentarios viven en GitHub Discussions.

Última actualización: 2026-05-08

Catálogo PortSwigger

Access Control Vulnerabilities

API Testing

Authentication Vulnerabilities

Clickjacking

CORS

Cross-Site Scripting (XSS)

CSRF (Cross-Site Request Forgery)

Insecure Deserialization

DOM-based Vulnerabilities

Essential Skills

Directory / Path Traversal

File Upload Vulnerabilities

GraphQL

HTTP Host Header Attacks

Information Disclosure

JWT (JSON Web Tokens)

LLM Attacks

Business Logic Vulnerabilities

NoSQL Injection

OAuth Authentication

OS Command Injection

Prototype Pollution

Race Conditions

HTTP Request Smuggling

Server-Side Template Injection (SSTI)

SQL Injection

SSRF (Server-Side Request Forgery)

Web Cache Deception

Web Cache Poisoning

WebSockets

XXE (XML External Entity)

Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and single quotes and backslash escaped

Resolver el lab

Recursos por skill

Skills relacionadas

Comentarios y truquillos

​Resolver el lab

​Recursos por skill

​Skills relacionadas

​Comentarios y truquillos

Resolver el lab

Recursos por skill

Skills relacionadas

Comentarios y truquillos