Insertando código javascript <script language='javascript'>location.href='http://www.us.es';</script>
Insertando css <div style="position:absolute;top:0px;left:0px;z-order=5000;background-color:red;color:white;width:100%;height:100%;">XSS</div>
