DOM XSS Lab

document.write with location.search

This lab contains a DOM-based cross-site scripting vulnerability in the search query tracking functionality.

Search Results

We found 0 results for your search term.

Lab Instructions:

To solve the lab, perform a cross-site scripting attack that calls the alert function.

Hint: The page uses document.write with data from location.search.