Table of Contents
Stored XSS into HTML context with nothing encoded
1: Access the Lab.
Website: https://portswigger.net/web-security/cross-site-scripting/stored/lab-html-context-nothing-encoded
2: Open the post.
3: Enter the following payload in the comment box.
Payload: <script>alert(1)</script>
4: Enter a name, email, and website.
5: Click “Post comment”.
6: The Lab has been completed.
