Comment by pizzeys

Try making it an XSS payload - that one often works ;)