Step 3

DOM XSSAttacker MUST use developer console and not inspect source as that will not show DOM elements
Reflected XSS-Check impact of attack vector
Stored XSSCheck impact of attack vector