Yelp · Report #228295
User can be fooled to Bookmark any restaurant by clickjacking
Informativestatus
lowseverity
9 Nov 2017disclosed
How it was found
In this report https://hackerone.com/reports/214087 you people said the clickjacking issue is fixed but i have found another issue of clickjacking. Using clickjacking attacker can fooled an user to bookmark n numbers of restuarants. I am attaching a PoC video , watch the video.