I\'ve got a script that inserts some content into an element using innerHTML.
innerHTML
The content could for example be:
Expending the answer of Lambder
document.body.innerHTML = ' onload="alert(\'test\');this.parentNode.removeChild(this);" />';
document.body.innerHTML = ' onload="alert(\'test\');this.parentNode.removeChild(this);" />'
You can use base64 image to create and load your script
Or if you have a Iframe you can use it instead
Iframe