one from telekom.de highly sensitive services vulnerable to persistent xss

i've reported  critical bug to telekom.de , one from more  highly sensitive service

i got this reply

then i got listed in the their hall of fame

Ironically the vulnerability still not fixed , i don't know what happened , for this reason i didn't publish the POC