After months of grinding and bug bounty politics, i finally got my recognition as a pre degree student. Originally my vuln got downplay by a program manager despite being in scope and agreed by platform triager.

Nonetheless, persistance eventually persist as i escalate it to higher national authority by demonstrating the real risk. Though its only reflect xss, i found it through supply chain and it involve a bank entity. A win is a win anyway.

Nothing is imposible if you want it bad enough. Happy hunting!