Stored XSS into HTML context with nothing encoded

1. Enter the following into the comment box:<script>alert(1)</script>
2. Enter a name, email and website.
3. Click “Post comment”.
4. Go back to the blog.