Internet Bug Bounty disclosed a bug submitted by mprogrammer: https://hackerone.com/reports/2645836 – Bounty: $2142 [Source]