# \<img src=x onerror=alert(0)\>

**URL:** <https://community.transloadit.com/t/img-src-x-onerror-alert-0/15764>\
**Category:** Uppy\
**Created:** [July 2, 2021, 7:50am UTC](https://community.transloadit.com/t/img-src-x-onerror-alert-0/15764 "2021-07-02T07:50:04Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![uytsgdf](https://avatars.discourse-cdn.com/v4/letter/u/a88e57/32.png) [@uytsgdf](https://community.transloadit.com/u/uytsgdf)\
**Post date:** [July 2, 2021, 7:50am UTC](https://community.transloadit.com/t/img-src-x-onerror-alert-0/15764/1 "2021-07-02T07:50:04Z")

</div>

![]()

---

<div class="post-metadata">

**Author:** ![uytsgdf](https://avatars.discourse-cdn.com/v4/letter/u/a88e57/32.png) [@uytsgdf](https://community.transloadit.com/u/uytsgdf)\
**Post date:** [July 2, 2021, 7:51am UTC](https://community.transloadit.com/t/img-src-x-onerror-alert-0/15764/3 "2021-07-02T07:51:32Z")

</div>

click

---

<div class="post-metadata">

**Author:** ![uytsgdf](https://avatars.discourse-cdn.com/v4/letter/u/a88e57/32.png) [@uytsgdf](https://community.transloadit.com/u/uytsgdf)\
**Post date:** [July 2, 2021, 7:52am UTC](https://community.transloadit.com/t/img-src-x-onerror-alert-0/15764/4 "2021-07-02T07:52:37Z")

</div>

[click](https://google.com)

---

<div class="post-metadata">

**Author:** ![uytsgdf](https://avatars.discourse-cdn.com/v4/letter/u/a88e57/32.png) [@uytsgdf](https://community.transloadit.com/u/uytsgdf)\
**Post date:** [July 2, 2021, 7:55am UTC](https://community.transloadit.com/t/img-src-x-onerror-alert-0/15764/6 "2021-07-02T07:55:03Z")

</div>

\<iframe src="javascript:document.vulnerable=true; \<

---

<div class="post-metadata">

**Author:** ![uytsgdf](https://avatars.discourse-cdn.com/v4/letter/u/a88e57/32.png) [@uytsgdf](https://community.transloadit.com/u/uytsgdf)\
**Post date:** [July 2, 2021, 7:55am UTC](https://community.transloadit.com/t/img-src-x-onerror-alert-0/15764/7 "2021-07-02T07:55:48Z")

</div>



---

<div class="post-metadata">

**Author:** ![uytsgdf](https://avatars.discourse-cdn.com/v4/letter/u/a88e57/32.png) [@uytsgdf](https://community.transloadit.com/u/uytsgdf)\
**Post date:** [July 2, 2021, 7:56am UTC](https://community.transloadit.com/t/img-src-x-onerror-alert-0/15764/8 "2021-07-02T07:56:19Z")

</div>

ccdcc

---

<div class="post-metadata">

**Author:** ![uytsgdf](https://avatars.discourse-cdn.com/v4/letter/u/a88e57/32.png) [@uytsgdf](https://community.transloadit.com/u/uytsgdf)\
**Post date:** [July 2, 2021, 4:34pm UTC](https://community.transloadit.com/t/img-src-x-onerror-alert-0/15764/9 "2021-07-02T16:34:28Z")

</div>

Click me