# 6) DOM XSS in jQuery selector sink using a hashchange event
looking at the home page source code reveals An interesting script that listens for changes in the URL hash and then attempts to scroll a specific blog post into view based on the hash value
let's try to provide some hash value in the url and see what happens
nothing happens in the page but if we look at the console we can see that an invalid hash value (non-existing title) triggers error
so what we can do is provide an xss payload in the hash value,and to make this payload get executed we will make it execute on Error Event.
since an invalid hash value (non-existing title) triggers error so this payload will be executed
**`
`**
there is the exploit server that I can use to prepare and deliver a custom made page. So I can create a page including an iframe to the vulnerable page. With an `onload` event I change the fragment which in turn triggers the `hashchange` event.
### Exploit
**``**
**Detailed explanation of the code.**
1. `
