The following Script / Code will allow you to check if your server or website is protecting agains XSS (cross site Scripting)

http://server/cgi-bin/testcgi.exe?<SCRIPT>alert(“Cookie”+document.cookie)</SCRIPT>