Is clickjacking still an exploitable vulnerability nowadays? Many bug bounty programs have this vulnerability listed in the "out of scope" section, and in better cases they accept it but don't reward ...
Modern PDF platforms can now function as full attack gateways rather than passive document viewers.