Cross-site scripting (XSS) is a type of security vulnerability that allows an attacker to inject malicious code into a website, allowing them to steal sensitive information or gain unauthorized access to the site. There are two common types of XSS attacks - reflected and stored. Reflected XSS involves injecting malicious code into a URL that is then reflected back to a user in a website's response. Stored XSS, on the other hand, involves storing malicious code on a website's server, which is then executed when a user visits the affected page. In this article, we will be comparing the differences between two URLs - bxss.me/t/xss.html?%00 and