OWASP Juice Shop

Hands-on web application security exercises and vulnerability walkthroughs.

All Vulnyx (35) TryHackMe (9) Hack The Box (1) OverTheWire (1) OWASP Juice Shop (1) HackMyVM (0) Meta-CTF (0)

juice-shop easy Web

Reflected Cross-Site Scripting (XSS) in Product Search Query

User-controlled search input is reflected without sanitization, allowing arbitrary JavaScript execution.

Jun 18, 2026 2 min read

#xss#web#client-side