clickjacking to Semrush auth login

How it was found

Description: Clickjacking (User Interface redress attack, UI redress attack, UI redressing) is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on. this attack could be perform to semrush auth user because its direct popup for geo.semrush.com login.

Steps To Reproduce: Create HTML file containg following code:

Impact

Revealing confidential information(credentials) AND/OR taking control of their computer/account while clicking on seemingly innocuous web pages.

The hacker selected the UI Redressing (Clickjacking) weakness. This vulnerability type requires contextual information from the hacker. They provided the following answers:

URL https://geo.semrush.com/

Can a victim be tricked into unknowingly initiating a specific action? Yes

What specific action can the user be tricked into? semrush auth login could be hack