Template for reporting vulnerability

Title -- Eg "Reflected Cross-Site Scripting in profiles"

Severity -- informational, low, medium, high, Critical

Description -- Brief description of what the vulnerability is

Reproduction Steps -- Brief description of how to reproduce the bug; preferably with a small proof of concept

Impact -- What can be done with the vulnerability ?

Mitigation -- How is it fixed ?

Affected asset -- Generally a list of affected URL