Challenge 28 of 66

Script Kiddie

🟠 Hard Injection +100 XP

A search form reflects user input without sanitization. Inject a script to trigger an alert and prove XSS is possible.

Script Kiddie // sandbox

Try injecting <script>alert(1)</script> or an event handler like onerror.

Know someone who would enjoy this? Challenge them.

Keep going

Make it count. Join free to earn XP for what you read and solve, keep a streak, and track your progress.