Enter a search term above
Try searching for "credit freeze", "dispute", or "credit score"
Popular Topics
Real World Lab — What to Find
This page simulates the Equifax Help Center search endpoint vulnerable to reflected XSS.
The ?search= parameter appears to be correctly handled in the HTML output — but look deeper.
View the page source and search for your input.
You will find it reflected a second time, inside a <script> block within a JavaScript analytics call.
Your goal: trigger alert() without using any HTML tags. You need to escape a JavaScript string, not HTML.