PoC: Chained MOTW bypass + drag/click vuln

...