Hi Harrycook, I am a security researcher and this blog was one of my findings on my client’s website. This doesn’t mean that every website is vulnerable to this trick of OTP bypass.

Thank You :)