Transforming Self-XSS Into Exploitable XSS

This blog is describes an attempt by a security researcher to exploit a Cross-site Scripting (XSS) vulnerability. It explains the importance of template strings in XSS filtering, how to overcome the document.domain issue, and the discovery and exploitation of Self-XSS, with reading suggestions.

A Pentester's Guide to Cross-Site Scripting (XSS)

Self-XSS to Stored XSS. How I've leveraged Self-XSS to increase…, by Rodriguezjorgex, Dec, 2023

A Pentester's Guide to Cross-Site Scripting (XSS)

Network Security Trends: November 2021 to January 2022

Turning Self-XSS into non-Self Stored-XSS via Authorization Issue at “PayPal Tech-Support and Brand Central Portal”, by YoKo Kho

AirBnb Bug Bounty: Turning Self-XSS into Good-XSS #2, Geekboy

10 Practical scenarios for XSS attacks

Weaponizing self-xss - NetSPI

Differences of Stored XSS and Reflected XSS

How I was able to turn self xss into reflected xss, by Hein Thant Zin

What is Cross-Site Scripting (XSS)? How to Prevent and Fix It

What is a Cross-Site Scripting (XSS) attack: Definition & Examples

XSS: Principles, Attacks and Security Best Practices

PDF) Cross-Site Scripting (XSS) Attacks And Mitigation: A Survey

Cross-Site Scripting (XSS) Attack in Modern Frontend Web, by Héla Ben Khalfallah