<
script
>
alert
(
'XSS'
)
<
/script>