Insecure JavaScript

Your name is <img src='x' onerror='alert(123)'>

Name via JavaScript
xxxxxx