Title: I&#x27;ve found some web app vulnerabilities to some high profile services in my country, but the vendor doesn&#x27;t seem interested in fixing them as 6 months have passed and they claim to have other things to do, which, judging by the announcements on the main page, is finishing missing features.<p>The fixes to the flaws that allow for iterative exfiltriation of PII are <i>trivial</i> to implement as well. The others are simple reflected XSS&#x27;s.<p>What is the most appropriate course of action here?
Upvote: