User:Lookup database/Scripts/JS/URL Injection

Using  elements to insert javascript and run on a user's client... [javascript:alert("sus") Click me!]