Open main menu

<script>alert(1)</script> UNION select user_email from user;