Title -- Eg "Reflected Cross-Site Scripting in profiles" Severity -- informational, low, medium, high, Critical Description -- Brief description of what the vulnerability is Reproduction Steps -- Brief description of how to reproduce the bug; preferably with a small proof of concept Impact -- What can be done with the vulnerability ? Mitigation -- How is it fixed ? Affected asset -- Generally a list of affected URL