← All labs
XSS Level 3 / 10 Medium

Reflected — JavaScript Context

Your input is placed inside an inline <script> string. Escape the string and run code.

Personalised greeting

We greet you by name using a little inline JavaScript.

Enter a name above.

This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of Uncrypt Playground is not part of the target.