For your consideration: a quick instruction for future security researchers.
Please report security issues to dev@vestacp.com