Cross-site-scripting 6
- Reflected XSS into attribute with angle brackets HTML-encoded
- DOM XSS in jQuery anchor href attribute sink using location.search source
- DOM XSS in innerHTML sink using source location.search
- DOM XSS in document.write sink using source location.search
- Stored XSS into HTML context with nothing encoded
- Reflected XSS into HTML context with nothing encoded