1. Find the file listing directory, the root of the file download directoryм (file_uploads (this is an example)). 
2. Load the following xssPayload.svg and open it