PHP
31 characters • 2 lines
<script>alert('XSS')</script>