cspshivam/playground
XSS Level 2 / 10 Easy
← All labs

Reflected — Attribute Break

Your value lands inside an HTML attribute. Break out of it and run code.

Profile nickname

Preview how your nickname appears. It is placed inside an input's value attribute.

This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of CSPSHIVAM Playground is not part of the target.