To help exploit this, you can create an HTML page on your Payload Hosting lab, and submit the payload hosting URL as the solution.