Is the Magento 1 bug bounty still active? I've found a new obscure XSS vector that will allow attackers to take control of administrator sessions and would like to submit the procedure, yet I don't see the form on the Magento site anymore.
If the bounty isn't running anymore, that would be a bummer...and if that's the case, then what is the preferred method of contact?
Thanks!