Those PoCs are fake. You can exploit a page that just prints “hello.”