Types of XSS:
Reflected
Stored
DOM
How to spot:
Find where does the data go
Figure out how the data is handled
Figure out how special characters are handled