PostMessage XSS — Mautic SDK (connect.onestream.live)

Setup: Load this attacker page on https://connect.onestream.live/.
MauticDomain = "https://connect.onestream.live/" matches the page origin — no patching needed.
Target: onestream.live (where the Mautic form is embedded).
Form ID: 21   Field: newslettersubscriptionwp