Use Kali Linux and Metasplitable machines, start DVWA, set the DVWA security to the right level and run your script in XSS reflected. Your script should insert an image into the webpage