This YT Video explains the best and shows more exploits
You can put in html "commands" and exploit almost everything. E. g. you can disconnect a player from the game/chat and make the game crash. Gold dupe is also possible with it. Post pictures from the game in chat.
The whole game is a mess.