The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Lab: Stored XSS into anchor href attribute with double quotes HTML-encoded

Sebastião | Last updated: Apr 13, 2020 04:44PM UTC

Hi, Please, I need help, The steps do not work.

Uthman, PortSwigger Agent | Last updated: Apr 14, 2020 09:25AM UTC

Hi, I have just tested the lab and it works. Can you please provide more information about the exact steps you are following (along with screenshots)? What browser are you using?

Khoa | Last updated: Jun 23, 2020 04:14AM UTC

javascript:alert(1) in the Website section didn't solve the lab, however manually clicks on the name , XSS is triggered (tested on both Firefox and Chrome). Any advices?

Uthman, PortSwigger Agent | Last updated: Jun 23, 2020 08:14AM UTC