XSS discovery

To identify XSS, try and see if the webpage sanitizes special characters in user input:

< > ' " { } ;

Consider using SecLists XSS fuzzing lists.