< script>alert("My first XSS payload!")</script>