<img src="x" onerror="alert('XSS1')">

&amp;lt;img src=&amp;quot;x&amp;quot; onerror=&amp;quot;alert(&amp;#x27;XSS1&amp;#x27;)&amp;quot;&amp;gt;

&lt;img src=&quot;x&quot; onerror=&quot;alert(&#x27;XSS1&#x27;)&quot;&gt;

&amp;amp;lt;img src=&amp;amp;quot;x&amp;amp;quot; onerror=&amp;amp;quot;alert(&amp;amp;#x27;XSS1&amp;amp;#x27;)&amp;amp;quot;&amp;amp;gt;