Stored XSS into HTML context with nothing encoded
Description
The website in this lab contains a stored cross-site scripting vulnerability in the comment functionality.
Reproduction and proof of concept
Enter the following into the comment box:
<script>alert('Hello World')</script>
Enter a name, email and website.
Click Post comment.
Go back to the blog.
