HackerOne Bug Bounty Disclosure: cross-site-scripting-on-dashboard2-omise-cobyoblivionlight