diff --git a/webgoat-lessons/cross-site-scripting/src/main/java/org/owasp/webgoat/xss/CrossSiteScriptingLesson5a.java b/webgoat-lessons/cross-site-scripting/src/main/java/org/owasp/webgoat/xss/CrossSiteScriptingLesson5a.java
index 6875d4d51..229c1654a 100644
--- a/webgoat-lessons/cross-site-scripting/src/main/java/org/owasp/webgoat/xss/CrossSiteScriptingLesson5a.java
+++ b/webgoat-lessons/cross-site-scripting/src/main/java/org/owasp/webgoat/xss/CrossSiteScriptingLesson5a.java
@@ -39,7 +39,7 @@ import java.util.regex.Pattern;
 public class CrossSiteScriptingLesson5a extends AssignmentEndpoint {
 
     public static final Predicate<String> XSS_PATTERN = Pattern.compile(
-            ".*<script>(console\\.log|alert)\\(.*\\);?<\\/script>.*"
+            ".*<script>(console\\.log|alert)\\(.*\\);?</script>.*"
             , Pattern.CASE_INSENSITIVE).asMatchPredicate();
     @Autowired
     UserSessionData userSessionData;