Slap in a payload into a GET or POST parameter named <i><a href="?xss=<script>alert(document.domain)</script>">xss</a></i>.