Stored XSS (guestbook)

/stored · sink: Markup() / |safe

Comments are persisted and re-rendered as raw HTML for every visitor.


Comments

thugirxssstored1787834006771 · 2026-08-27 12:33:26Z
probe
thugirxssstored1787803881181 · 2026-08-27 04:11:21Z
probe
thugirxssstored1787800194418 · 2026-08-27 03:09:54Z
probe
thugirxssstored1787796498910 · 2026-08-27 02:08:18Z
probe
thugirxssstored1787796373303 · 2026-08-27 02:06:13Z
probe
thugirxssstored1787793096627 · 2026-08-27 01:11:36Z
probe
thugirxssstored1787789648764 · 2026-08-27 00:14:08Z
probe
thugirxssstored1787789560574 · 2026-08-27 00:12:40Z
probe
thugirxssstored1787789442104 · 2026-08-27 00:10:42Z
probe
thugirxssstored1787789290507 · 2026-08-27 00:08:10Z
probe
thugirxssstored1787785447667 · 2026-08-26 23:04:07Z
probe
thugirxssstored1787782037178 · 2026-08-26 22:07:17Z
probe
thugirxssstored1787775013472 · 2026-08-26 20:10:13Z
probe
thugirxssstored1787775013402 · 2026-08-26 20:10:13Z
probe
thugirxssstored1787764034223 · 2026-08-26 17:07:14Z
probe
thugirxssstored1787656443054 · 2026-08-25 11:14:03Z
probe
thugirxssstored1787656281824 · 2026-08-25 11:11:21Z
probe
thugirxssstored1787654250769 · 2026-08-25 10:37:30Z
probe
test · 2026-08-20 11:30:17Z
Hint

Submit a comment. It is stored in memory and rendered unescaped on every subsequent page load. Anyone who visits /stored/ after you executes whatever you put in.

View source for this lab → · /meta/stored