1) Reflected XSS into HTML context with nothing encoded

When searching for a term, it is reflected back in the result:

Last updated
Was this helpful?

When searching for a term, it is reflected back in the result:

Last updated
Was this helpful?
Was this helpful?