<svg/onload=alert('XSS')> <BODY ONLOAD=alert('XSS')

Caption: <svg/onload=alert('XSS')> <BODY ONLOAD=alert('XSS')> >'>"><img src=x onerror=alert(document.cookie)> >'>"><img src=x onerror=prompt(0)> >

Credit: testet