Where do you publish the found XSS?

Question

XSS

Sometimes I write specifically to admins and site developers about the XSS found. But sometimes there is no time to write separate letters, I want to publish the XSS and bugs found on the site as a list ... Where and how do you publish the found XSS and other vulnerabilities?

Answer 1

https://hackerone.com/
For sites of "special" countries, it is worth publishing anonymously or, better, not working with them, because, most often, you will not receive money from them

Answer 2

Do site admins ask you to look for vulnerabilities on their sites? If not, I would think 100 times before writing about the vulnerability to the admin, they can write a statement against you