or \" onmouseover=alert(1) into each input and check if the browser executes them in the response."
},
{
"@type": "HowToStep",
"position": 3,
"name": "Test Stored XSS",
"text": "Submit payloads through forms that persist data (comments, profiles, messages). Reload the page to verify if the stored payload executes for other users."
},
{
"@type": "HowToStep",
"position": 4,
"name": "Test DOM-based XSS",
"text": "Analyze client-side JavaScript for sinks (innerHTML, document.write, eval) that process user-controlled sources (location.hash, document.referrer) without sanitization."
},
{
"@type": "HowToStep",
"position": 5,
"name": "Classify Severity and Report",
"text": "Determine the XSS type (reflected/stored/DOM), assess impact (session theft, defacement, data exfiltration), and document with proof-of-concept for remediation."
}
]
}
