Update xss-payloads.md