The Scanner Came Back Clean. The Discount Code Still Worked 40 Times.

The automated scan on a checkout flow came back with nothing above low. No SQLi, no reflected XSS, no...