You can use "payload" GET or POST parameter for XSS.