[bigato]

funny that you don't see their email address for contact if you don't have javascript running, which is exactly one of the doors for this kind of vulnerability as they mention on their site