Try to insert our own JS code

Column	Exploit
HTML Tag attribute context	Insert JS event handler or JS code into tag
HTML Tag context	Add event handlers to tags