<script>alert(1)</script>

(select extractvalue(xmltype('%ldxip;]>'),'/l') from dual)
Login to post a comment