API Security Testing for Dummies [Free eBook]
<img src="<img src=search"/onerror=alert("XSS")//">And click on DEBUG CODE, and then first it will show you "Sample must have <head> element" click OK and wait for the window to load if nothing happen then try the same thing again or simply you can click on RUN CODE, and you will get a popup which is XSS.