PHP blog intentionally vulnerable to XSS. Learn and test stored & reflected XSS safely in Docker.
116
A small PHP blog-style website packaged as a Docker image.
⚠️ Security Notice
This application is intentionally vulnerable and is meant only for learning and testing.
It contains insecure input handling that can lead to stored and reflected XSS, which means injected code may run in the browser and access client-side data (such as cookies).
Do not use this in production or with real users.
docker run -p 8080:80 chrishsec/simple-blog
Content type
Image
Digest
sha256:61b3ece2b…
Size
167.5 MB
Last updated
8 months ago
docker pull chrishsec/simple-blog