“You need to put it in a report and you need to explain it properly and you need to understand the risks behind the issue you're finding.”

Transcript evidence from Zohar Shachar -- Bug Bounty from Both Sides.