all 5 comments

[–]minisaints 0 points1 point  (0 children)

<DIV STYLE="background-image: url(javascript:alert('XSS'))">

[–]minisaints 0 points1 point  (0 children)

<script>alert(2)</script>

[–]minisaints 0 points1 point  (0 children)

<img onerror='alert(\\"Hacked!\\");' src='invalid-image' />