Transforming Self-XSS Into Exploitable XSS

This blog is describes an attempt by a security researcher to exploit a Cross-site Scripting (XSS) vulnerability. It explains the importance of template strings in XSS filtering, how to overcome the document.domain issue, and the discovery and exploitation of Self-XSS, with reading suggestions.

Conversing with Vulnerabilities: AI-Assisted CVE Search · Scorpil

AirBnb Bug Bounty: Turning Self-XSS into Good-XSS #2, Geekboy

Reflected–XSS attack Download Scientific Diagram

A client‐server JavaScript code rewriting‐based framework to detect the XSS worms from online social network - Gupta - 2019 - Concurrency and Computation: Practice and Experience - Wiley Online Library

A Pentester's Guide to Cross-Site Scripting (XSS)

Turning Self-XSS into non-Self Stored-XSS via Authorization Issue at “PayPal Tech-Support and Brand Central Portal”, by YoKo Kho

What is a Cross-Site Scripting (XSS) attack: Definition & Examples

Transforming Self-XSS Into Exploitable XSS

Reflected Cross Site Scripting (r-XSS), by Christopher Makarem, IOCSCAN

Transforming Self-XSS Into Exploitable XSS

What is Cross-Site Scripting (XSS)? How to Prevent and Fix It