[Click me](javascript:alert('XSS')) <javascript:alert("XSS")> <div onclick="alert('XSS')">click me</div> <script>alert("XSS")</script> <script> alert("XSS"); </script>