XVIDEOS disclosed a bug submitted by j3rry4unt: https://hackerone.com/reports/1761505 – Bounty: $50 [Source]