← All labs
XSS Level 2 / 10 Easy

Reflected — Attribute Context

Your input lands inside an HTML attribute value. Break out and execute script.

Profile nickname

Preview how your nickname appears. It is placed inside an input's value attribute.

This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of Uncrypt Playground is not part of the target.