Log in to your account
Log in with <img src=foo.png onerror=alert(/Hacked/) />
If you do not have an external account, but do have a local account, you can still log in: