To report a security problem, open a private report on this repository: on GitHub, go to the Security tab and choose Report a vulnerability. Only the maintainer can read it.
Do not open a public issue for a security problem.
The live site is a demo on generated data; it holds no real customers or payments.