Stored XSS

Code

        let list = '';
        localStorage["data"].split(',').map(x => list += '<li>' + x + '</li>')
        $('#list').html(list);
    

Demo