Click me

javascript:alert("XSS")

click me

Inline image