Cross-site scripting (XSS) cheat sheet

This cross-site scripting (XSS) cheat sheet contains many vectors that can help you bypass WAFs and filters. You can select vectors by the event, tag or browser and a proof of concept is included for every vector.

You can download a PDF version of the XSS cheat sheet.

This cheat sheet was brought to by PortSwigger Research. Created by @garethheyes. Follow us on twitter to receive updates.

This cheat sheet is regularly updated in 2023. Last updated: Mon, 27 Feb 2023 11:43:21 +0000.