Click the submit button on the following page (in a real attack the form can be submitted without user interaction):

alert(1)\">