Single Sing On - Clickjacking

How it was found

Description: Clickjacking (User Interface redress attack, UI redress attack, UI redressing) is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on. Browsers Verified In: Any

Steps To Reproduce: Create HTML file containg following code: <iframe src="https://sso.semrush.com/"></iframe> Execute the HTML file & you will see Single Sing On login page present trough the iframe.

Supporting Material/References:

Impact

Revealing confidential information(credentials) AND/OR taking control of their computer/account while clicking on seemingly innocuous web pages.