- Various XSS payloads - `` - `` - `` - Possible filter bypass - `` - `` - `` - `` - Cookie Theft - `` - Keylogger ```HTML ``` - HTML encoding - < encoded to < - > encoded to > - ‘ encoded to ' - “ encoded to " - & encoded to &