Looking for potentially a way to bypass the removal of < tags. (assume the <p> tags are being returned by the application)
<p>$[chr]found></p>
<p><img/src/onerror=alert(1)></p>
1
1
1
1