You should remove your example, it could be a spoil in certain cases (you probably see what I mean).
There is no need to bypass an XSS filter in real 6. Try looking over all the site for vulnerability, to the smallest user submitted data, try everywhere, and you will find.