There's multiple way to spread it, you put that url inside an iframe and then you could upload it on some ad network, you could build some viral content somewhe

There's multiple way to spread it, you put that url inside an iframe and then you could upload it on some ad network, you could build some viral content somewhere and let it spread that way. It's pretty easy to spread an XSS.