So I'm unsure how to go about dealing with what I found. It's a really simple security hole, but opens lots of personal data if exploited.
I tried to email the webmaster about the issue. No response. I'm concerned because I hadn't done very much on the site and already I had my SSN, bank account routing/acc numbers, personal address, etc.
What should I do? I don't want to hear in a few months that some other amateur hacker got all of the information and sold/leaked it. Thanks!