[workaholics]

Your definition of persistent versus non-persistent is inaccurate.

A persistent XSS vulnerability is, well, persistent, meaning that you don't need to have the specialized query every time you want to display your content.

A non-persistent XSS vulnerability is just the opposite, where every time you want to display something, the query must be sent.

The picture you show for non-persistent is just a straight up not working vulnerability.

Did you read how I said copy the link after you click search and paste it and then if the non-persistent pops up like this then its invulnerable to deface. Thats what it looks like. Okay. Not trying to argue or anything im saying the thread in the most simplistic way I can. I also deface the one site on friday. Trust me I know what and how to do xss. http://i.imgur.com/RvOSZ.png