Guestbook

Try XSS payload:

<script>alert('XSS')</script> <img src=x onerror=alert(1)>