it is better brother if you telling clearly how you found Clickjacking vulnerability. You just telling about what is Clickjacking vulnerability, and mitigation, etc.