Create xss-payloads.md