THM Merry XSSmas Writeup: Learning Reflected and Stored XSS Attacks

Dec 11, 2025 · 5 min read · Introduction The Merry XSSmas room demonstrates how improper input handling can lead to dangerous client-side vulnerabilities. This challenge focuses on two common web vulnerabilities: Reflected XSS