Reporting the bug is important but highlighting what are the implications of the bug is equally important. With one simple string , I was able to find 45 bugs

Reporting the bug is important but highlighting what are the implications of the bug is equally important. With one simple string , I was able to find 45 bugs in different software and every time I reported the bugs I decided to tell them what were the implications of the bugs. With no professional background in security, I was able to claim 18K in bug bounty rewards by being professional, clear and providing clear implications of the bug. It is quite possible that people fixing the bugs may not be well versed in some components of the bug and are likely to not understand the implication of the bugs until you tell them so.