Tell HN: Domains of the Eurpoean Commission appear to be hacked

In case of https://europa.eu/europass/en it looks like anybody can create a CV, basically upload a PDF.

How does this happen? are DNS servers hacked and things redirected?