for those wondering, here is the complete exploit by user "Fallout76" (ironic) attached as a txt file in a zip because soapbox FE sanitizes for this. this works on pleromaFE (not soapbox) maybe other FEs the file has been deleted (was several days ago) and i have disabled pleroma FE for now until this vulnerability has been dealt with