Please submit vulnerability discoveries to our bug bounty program: https://hackerone.com/hubspot