To help exploit this, you can create an HTML page on your Payload Hosting lab, and submit the URL as the solution.