---
title: "Would \"Search Bars\" be considered Self-XSS ? - Cybr"
description: "Would \"Search Bars\" be considered Self-XSS ?: a thread from the General Discussions forum on Cybr, with 1 reply. Read-only archive."
url: https://cybr.com/forums/topic/would-search-bars-be-considered-self-xss/
---

Topic

# Would "Search Bars" be considered Self-XSS ?

1 reply

**Archived.** These forums are read-only. The conversation continues on [Discord](https://cybr.com/discord/).

1. Former member

   Jun 25, 2021

   I have made this mistake before, so i am just curious when starting on a new target would the search bar be a place to avoid ?

2. Christophe

   Jul 13, 2021

   Search bars can be a great place for reflected XSS, since they usually also change the URL as you search. So for example, say we had this search endpoint:

   cybr.com/search/

   When we'd type something in the search bar, we might see this happening to the URL:

   cybr.com/search/?q=example search query

   If you managed to find an XSS vulnerability through the search bar, and you could copy/paste the URL containing your payload, you could send it to a victim, and if they clicked on it, they'd trigger the XSS:

   cybr.com/search/?q=<script>alert(1)</script>

[< Back to General Discussions](https://cybr.com/forums/forum/general-discussions/)