Lab: Stored XSS into HTML context with nothing encoded

1. Enter the following into the comment box:

   <script>alert(1)</script>
2. Enter a name, email and website.
3. Click "Post comment".
4. Go back to the blog.

z3nsh3ll

Michael Sommer