@VirginAtlantic - Can you DM me an email address of where I can send a web vulnerability to you? The obvious choice of security@virginatlantic.com doesn't work.

Hi Bil, I hope you're well. Please send this to customer.services@fly.virgin.com and we'll get it logged accordingly. ^AE