New posts in Grey Hat

How should I tell school that they are vulnerable when I wasn't given permission to check?