• Payload: <script>alert(documnet.cookie)</script>

Click on the left link module, and then click add

Enter our payload and click submit

Found that payload has been executed

Back to the home page, because it is a friendly link, the front desk is also affected.