02 - Stored XSS into HTML context with nothing encoded
Given - XSS in comment
End goal - call alert function
Start the lab , on hompage open any given post. Scroll down to comments. In comment section write the xss payload - <script>alert(2)</script>
An alert get popped up -
Lab solved :
