Transforming Self-XSS Into Exploitable XSS

This blog is describes an attempt by a security researcher to exploit a Cross-site Scripting (XSS) vulnerability. It explains the importance of template strings in XSS filtering, how to overcome the document.domain issue, and the discovery and exploitation of Self-XSS, with reading suggestions.

A Pentester's Guide to Cross-Site Scripting (XSS)

Self-XSS - Self-XSS Attack Using Bit.Ly To Grab Cookies Tricking Users Into Running Malicious Code

Evaluation and monitoring of XSS defensive solutions: a survey, open research issues and future directions

How To Protect Your Website Against A Cross-Site Scripting (XSS) Attack

What is stored cross-site scripting? - Quora

Network Security Trends: November 2021 to January 2022

Applied Sciences, Free Full-Text

Transforming Self-XSS Into Exploitable XSS

Turning Self-XSS into non-Self Stored-XSS via Authorization Issue at “PayPal Tech-Support and Brand Central Portal”, by YoKo Kho

What is Cross Site Scripting (XSS) ? - GeeksforGeeks

js-xss/benchmark/file.html at master · leizongmin/js-xss · GitHub

WordPress 5.8.2 Stored XSS Vulnerability

How to Prevent Cross-Site Scripting (XSS) in JavaScript

10 Practical scenarios for XSS attacks

XSS on Google Search - Sanitizing HTML in The Client? : r/programming