Website is vulnerable to clickjacking