Transforming Self-XSS Into Exploitable XSS

This blog is describes an attempt by a security researcher to exploit a Cross-site Scripting (XSS) vulnerability. It explains the importance of template strings in XSS filtering, how to overcome the document.domain issue, and the discovery and exploitation of Self-XSS, with reading suggestions.

A client‐server JavaScript code rewriting‐based framework to detect the XSS worms from online social network - Gupta - 2019 - Concurrency and Computation: Practice and Experience - Wiley Online Library

What is a Cross-Site Scripting (XSS) attack: Definition & Examples

Reflected Cross Site Scripting (r-XSS), by Christopher Makarem, IOCSCAN

WordPress 5.8.2 Stored XSS Vulnerability

Cross Site Scripting (XSS) - Scaler Topics

A Pentester's Guide to Cross-Site Scripting (XSS)

Turning Self-XSS into non-Self Stored-XSS via Authorization Issue at “PayPal Tech-Support and Brand Central Portal”, by YoKo Kho

Turning cookie-based XSS into account takeover – Open Bug Bounty Blog

XSS on Google Search - Sanitizing HTML in The Client? : r/programming