<div class="carousel-container">
  <div id="carouselExample" class="carousel slide" data-ride="carousel">
    <div class="carousel-inner">
      <div class="carousel-item active">
        <img
             src="https://placeholder.pics/svg/400x200/DEDEDE/555555/Slide%201"
             />
      </div>
      <div class="carousel-item">
        <img
             src="https://placeholder.pics/svg/400x200/0000ff/fff/Slide%202"
             />
      </div>
      <div class="carousel-item">
        <img
             src="https://placeholder.pics/svg/400x200/ae4d08/fff/Slide%203"
             />
      </div>
    </div>
  </div>
  <a
     class="next"
     href="javascript:alert('XSS Success')"
     role="button"
     data-slide="previous"
     title="XSS executes"
     >
    <span class="xss">Previous (XSS)</span>
  </a>
  <a
    data-target="#carouselExample"
    class="right"
    role="button"
    data-slide="next"
  >
    Next (normal)
  </a>
</div>

body {
  padding: 1rem;
}

.carousel-container {
  width: 400px;
}

.right {
  float: right;
}