Click me

javascript:alert("XSS")

Inline image