"><script alert('document.domain');</script>

XSS