I found a flaw in the whmcs panel that can be done in less than 1 minute without messing with decryption and that allows use without any license, I thought about sending it to their bug bounty service, However, I did a quick search on Reddit and saw that they have a reputation for fixing reported bugs and not paying, The bug exists from version 6 to the latest, is there somewhere I can sell it?

Sorry if my English is bad, I'm using a translator