Html injection exploitation

/body>