Interactive cross-site scripting (XSS) cheat sheet for 2025, brought to you by PortSwigger. Actively maintained, and regularly updated with new vectors.

This cheat sheet demonstrates that input filtering is an incomplete defense for XSS by supplying testers with a series of XSS attacks that can bypass certain XSS defensive filters.

Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted web sites. XSS attacks occur when an attacker uses a web …

Feb 26, 2025 · This XSS cheat sheet provides a comprehensive guide covering concepts, payloads, prevention strategies, and tools to understand and defend against XSS attacks …

The definitive XSS payload directory, featuring a comprehensive and categorized cheat sheet with hundreds of verified payloads for ethical hackers and security researchers.

Jul 3, 2025 · Secure your web apps! XSS cheat sheet with attack examples, bypass techniques & prevention methods. Essential cybersecurity reference 2025.

May 19, 2025 · Below is a curated cheat sheet of common and advanced XSS payloads, techniques, and bypass strategies for testing and understanding XSS vulnerabilities. Use …

XSS Attack Cheat Sheet: The following article describes how attackers can exploit different kinds of XSS vulnerabilities (and this article was created to help you avoid them):

This article is a guide to Cross Site Scripting (XSS) testing for application security professionals. This cheat sheet was originally based on RSnake's seminal XSS Cheat Sheet previously at: …

Mar 18, 2025 · This XSS cheat sheet is a valuable resource for anyone involved in web security, providing essential guidelines and techniques to prevent XSS attacks. It covers various attack …