Email validation bypass vulnerability