Emailing the webmaster is a good way to begin. Try security@domain and hope someone checks the catchall inbox. Learn about best practices for responsible disclo

Emailing the webmaster is a good way to begin. Try security@domain and hope someone checks the catchall inbox. Learn about best practices for responsible disclosure if you want to escalate.