I do not report a bug on WinSCP, but on winscp.net.
There is a "Edit this page" at the right of your pages.
For example :
You can click on the "edit this page" and arrive on a text area with the source of the text.
I do not try to change the text and not sure I could be effective, but I cliked on the "save" button and it works.
Some with a bad spirit could use this issue to attack your site.
Thank you for the good work !