Download from playstore a QR code scanner, on mobile, It will execute XSS in mobile browser, but for PoC, I had copied the url I got and paster it in browser. I hope this makes it clear.