Report privately
Email fundedcompass@web.de with the affected URL, reproduction steps, potential impact, a safe demonstration, browser, device and time.
Permitted scope
Use your own test data and minimise impact. Do not access third-party data, publish personal information, manipulate newsletter records, perform social engineering, load tests or mass scans without prior written permission.
Recognition
Reports are assessed by severity, reproducibility and actual impact. No cash reward is guaranteed. Any recognition and publication of reporter details require agreement.