[Paradoxiummm]

alright so i discovered a vunerability in my previous schools website that allowed me to access any account and disable accounts. i informed them but they only removed the disable accounts feature then recently i tried pentesting that website again and found a xss vunerability. ive tried every way to contact them but the website's contain gmail is only for employees. what to do?

[DramaKing]

When you've exhausted every means of responsible disclosure, it's acceptable to disclose the vulnerability publicly.