Port Swigger Stored XSS into HTML context with not Stored XSS into HTML context with nothing encoded¶ Solution¶ Put XSS payload to blog post¶ Payload: <script>alert("hacked")</script>