```
// Angular Application Code

// Importing necessary modules
import { Component } from '@angular/core';

// Component Declaration
@Component({
  selector: 'app-root',
  template: <h1>XSS Vulnerability with Strict Contextual Escaping Disabled</h1> <form (submit)="onSubmit(name.value, 
  message.value)"> <label>Name:</label> <input type="text" #name> <br><br> <label>Message:</label> <textarea #message 
  [innerHTML]="message.value"></textarea> <br><br> <button type="submit">Submit</button> </form> ,
})

 // Component Class
 export class AppComponent {
   onSubmit(name, message) {
     // Malicious Script
     const script = <script>alert('XSS Attack: ${name} says ${message}')</script>;
     // Injecting the Malicious Script
     document.body.innerHTML += script;
  }
}

// Note: This code is for educational purposes only and is not recommended for use in real-world applications. It is important to always enable Strict Contextual Escaping to prevent XSS attacks.
```
// Angular Application Code

// Importing necessary modules
import { Component } from '@angular/core';

// Component Declaration
@Component({
  selector: 'app-root',
  template: <h1>XSS Vulnerability with Strict Contextual Escaping Disabled</h1> <form (submit)="onSubmit(name.value, 
  message.value)"> <label>Name:</label> <input type="text" #name> <br><br> <label>Message:</label> <textarea #message 
  [innerHTML]="message.value"></textarea> <br><br> <button type="submit">Submit</button> </form> ,
})

 // Component Class
 export class AppComponent {
   onSubmit(name, message) {
     // Malicious Script
     const script = <script>alert('XSS Attack: ${name} says ${message}')</script>;
     // Injecting the Malicious Script
     document.body.innerHTML += script;
  }
}

// Note: This code is for educational purposes only and is not recommended for use in real-world applications. It is important to always enable Strict Contextual Escaping to prevent XSS attacks.