title: Is this a possible xss vulnerability?
body: <p>On my website, when I go to console under <strong>dev tools</strong>, I am able to run following commands:</p>
  
  <pre><code>template = document.createElement("template")
  template.innerHTML = "&lt;img src=x onerror=alert(1)&gt;"
  div = document.createElement("div")
  div.innerHTML = template.innerHTML`
  </code></pre>
  
  <p>When I run this, a popup shows:</p>
  
  <p>'1'. Is this a valid vulnerablity? </p>
  
  <p>If it is, then how can we expand it to do more critical stuff. And what is the possible solution?
  Thanks in advance</p>