Update and rename o.O<script> to o.O<script>alert(123)