XSSmh - Challenge 7 - Crouching JS, Hidden Field





In this challenge, you are injecting into a hidden input field and cannot break out of the tag.
Your objective is to cause an alert box to pop up on the resulting page.
(Note: Some browsers have anti-XSS protections which prevent this from working. Try using Firefox, Safari, or old versions of Internet Explorer.)
PARAMETERS:
Injection Type - Custom, value attribute of hidden input field
Sanitization - No right angle bracket (>)
Injection String: