XSS: reflected, stored and DOM

A short walkthrough. Replace the placeholder embed from the console.