WEB 007 - Reflected XSS

You searched for: hi

The query is echoed into the body unencoded. Pop alert(document.domain).

flag{cwap_reflected_xss}

CWAP Prep Labs · HackXpert Coaching · The XSS Rat · authorized lab use only