xss2.html

<html><body>
Mighty <div id='namediv'></div>, compose your email now:

<form>To: <input type='text'></input><br>                                                                                                          
  Subject: <input type='text'></input><br>                                                                                                           
  Content: <textarea></textarea><br>                                                                                                                 
  <input type="button" value="Send!"/>                                                                                                               
</form>

<script>
  document.getElementById('namediv').append("$name");
</script>

</body></html>