I was made aware of two security issues in Klaro allowing XSS. Since there's no security policy I'm asking for the preferred security contact.