XSS in Limited Input Formats
Cross Site Scripting (XSS)
Testing for XSS vulnerabilities requires knowing the data format of input. Usually the format is simply “string” without any restrictions but sometimes the manipulation of XSS entry point is limited.
https://brutelogic.com.br/blog/xss-limited-input-formats/