OWASP ZAP WAVE - XSS in a URL parameter with the script tab stripped out
Description
The 'name' parameter in the URL is written to the page with script and SCRIPT tabs being stripped. It will still be vulnerable to script injection attacks.
Only a GET is vulnerable, not a POST.
Example
Example link: Simple XSS in a URL parameter