<img src=x onerror="javascript:alert('XSS')">
yet
yet