PortSwigger

Steps

Description This lab contains a simple reflected cross-site scripting vulnerability in the search functionality. To solve the lab, perform a cross-site scripting attack that calls the alert function.

Vulnerability in the search functionality.

Step 1: insert a Script

  1. Copy and paste the following into the search box: <script>alert(1)</script>

  2. Click “Search”.

  • check Pop-up the alert message

Solved Lab