Weaponised XSS Payloads

Weaponised XSS Payloads is an open-source collection of JavaScript examples designed to demonstrate the security impact of cross-site scripting vulnerabilities. It focuses on showing how seemingly limited script injection issues can lead to serious consequences in web applications. The repository includes proof-of-concept scripts targeting popular content management systems, including WordPress, Drupal, Joomla, and MyBB. Examples illustrate risks involving unauthorized administrative actions, content modification, and account compromise. It also includes templates for staged payload execution and iframe-based interactions. Security researchers can study these examples to understand exploitation paths and document vulnerabilities during authorized assessments. The project accompanies educational material about evaluating XSS severity. It is a collection of testing resources rather than an automated vulnerability scanner.