There exists a horizontal privilege escalation vulnerability in the xmall project

Hello

I found a horizontal privilege escalation vulnerability in the XMALL application. Where should I disclose it? Can I have your email

Thanks, Ori.