# 1) Reflected XSS into HTML context with nothing encoded

<div align="left"><figure><img src="https://1410593648-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FYI2noEqPw69jd0hR7Prp%2Fuploads%2FVfUEL1f4smqvjWgQIVJM%2Fimage.png?alt=media&#x26;token=07918439-c049-4f77-ba59-61f119d66eba" alt=""><figcaption></figcaption></figure></div>

When searching for a term, it is reflected back in the result:

<div align="left"><figure><img src="https://1410593648-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FYI2noEqPw69jd0hR7Prp%2Fuploads%2FKMz2BrIszxn7i6yjbvft%2Fimage.png?alt=media&#x26;token=fc75548f-6169-4416-82b8-16710caf0949" alt=""><figcaption></figcaption></figure></div>

