<img src=x onerror=alert(0)>

Uppy
1

3

click

4

click

6
<iframe src="javascript:document.vulnerable=true; <
7

8

ccdcc

9

Click me