img src 'x' onerror 'alert("XSS")'

<img src=x onerror=prompt(1)>

12:54

OWASP BeNeLux Day Don't trust the DOM: Bypassing XSS mitigations via script gadgets by S. Lekies

42:14

Trusted types & the end of DOM XSS - Krzysztof Kotowicz

40:51

AppSec EU15 - Gareth Heyes - XSS Horror Show

41:10

Hacking Modern Desktop apps with XSS and RCE | Abraham Aranguren | BSides Singapore Conference 2021

51:05

Why LocalStorage is Vulnerable to XSS (and cookies are too)

14:21

Can AI Hack Websites with XSS? #ChatGPT

30:38

Angular and the OWASP top 10 | Philippe De Ryck | #AngularConnect

30:49

Reflected XSS with filter bypass | FastFoodHackings | Bug Bounty Service

7:31

Explained: Bypass ALERT() XSS Filter | CyberSecurityTV

12:08

XSS in payments.google.com

0:48

Breaking XSS Mitigations Via Script Gadgets

48:18

Hacking Modern Desktop apps with XSS and RCE | Abraham Aranguren | NULLCON Webinar

58:07

" onload="s=decodeURI(location.hash.substr(1)); s ? eval(s) : location='http://example.com/r';

4:02

<img src=v onerror=alert(1)>

0:12

Avoiding Common Security Mistakes

31:21

<img src=x onerror=prompt('kikoocat')>

0:22

OWASP AppSecUSA 2012: XSS & CSRF with HTML5 - Attack, Exploit and Defense

49:36

Stored Cross-Site Scripting (Stored XSS) Explained

8:24

Hacking JavaScript Desktop apps with XSS and RCE - Abraham Aranguren

45:46