- Output for 8.1.0 - 8.1.27, 8.2.0 - 8.2.17, 8.3.0 - 8.3.4
- <img src='' onerror='alert(1)' alt='' />
- Output for 7.3.0 - 7.3.33, 7.4.0 - 7.4.33, 8.0.0 - 8.0.30
- <img src='' onerror='alert(1)' alt='' />
<?php
$url = '\' onerror=\'alert(1)';
echo "<img src='" . htmlentities($url) . "' alt='' />";