Malvertiser ScamClub Bypasses Iframe Sandboxing with PostMessage (CVE-2021–1801)
blog.confiant.com