[user5994461]

What guidelines? Never seen any vulnerability report that included how to trigger the vulnerability, what it gives the attacker or how to remediate it in the language/framework being used.