🔓 VULN #14: Open Redirect to XSS (parameter 'return_url')

Test URL: ?return_url=https://www.google.com

Escalation: The redirect URL is reflected in the page before redirect!