diff --git a/Fuzzing/XML_FUZZ b/Fuzzing/XML_FUZZ
index c2223acc242..1aaf47f3ef8 100644
--- a/Fuzzing/XML_FUZZ
+++ b/Fuzzing/XML_FUZZ
@@ -11,6 +11,11 @@
]>
]>
+"]]>"
+"cript:alert('XSS')"">"
+""
+"XSS"
+','')); phpinfo(); exit;/*
## Element and Attrib Values
@@ -48,3 +53,5 @@ false
{{Tnn96}}
{= Tnn96}
{{= Tnn96}}
+count(/child::node())
+x' or name()='username' or 'x'='y