I also managed to execute JavaScript by adding <img src=x onerror=alert(1337)> to my blade description, it seems to run on the home-page or here: https://ftp.go

I also managed to execute JavaScript by adding <img src=x onerror=alert(1337)> to my blade description, it seems to run on the home-page or here: https://ftp.googleblade.com/jenoer https://ftp.googleblade.com/jenoer Edit: Unfortunately I have to go to bed, if I find anything else tomorrow I'll drop you an e-mail.