🛡 XSS BEGINNER +50 XP · +25 no-hint bonus

Reflected XSS — Search Box

BookShop's search box echoes your query back into the page without sanitisation. Find a way to make the page execute arbitrary JavaScript.

https://bookshop.local/search