I agree you should email the site, but i would be careful not to suggest the site is vulnerable unless you have clear evidence of that or you risk not being tak

I agree you should email the site, but i would be careful not to suggest the site is vulnerable unless you have clear evidence of that or you risk not being taken seriously. Just be honest about it. The devs might not want that shit on their sites either, but were told they had to include them in which case they'd probably love to have something to show it's causing users problems.