How to report a bug that makes your website vulunerable?