Ask a yes/no question and click the 8-ball!
Hint: The 8-ball's answer is vulnerable to XSS. Try asking a "question" with a script!
Example: </strong><img src=x onerror=alert('XSS')>
</strong><img src=x onerror=alert('XSS')>