HTML Injection POC 350$ Bug Bounty