[cod3x]

Hello forums !

I trying to resolve a CTF challenge based on stored XSS, but I'm stuck on this one with a function called htmlspecialchars (to resume, the function transform < and > by &lt; and &gt

I would like to know If someone have a solution to bypass ?

Here is an example of output source when I submit the form:

<span><b>aaa</b>&nbsp;(<i class="invite">status : invite</i>)</span><br/><span>&lt;script&gt;alert('XSS');&lt;/script&gt;</span><br/><hr/>