SC5.io HTML5 Clients Veikkaus, POP Vakuutus and F-Secure Sites Vulnerable

Just weeks after SC5, a company based in Finland, launched its HTML5 technology and sold it to Veikkaus, POP Vakuutus and F-Secure Personal Cloud Service, big HTML5 loopholes that are easy to exploit have been sited on the frontend of Veikkaus and POP Vakuutus sites by users (these are big companies!!!). Two users have also reported being able to execute unwanted code on the F-Secure site through their browser facilitated by the cross site scripting vulnerability associated with HTML5. All these vulnerabilities are unique to a programmer called Martti Malmi.

Was thinking of sending my work over to SC5.io but need some advise on availability of other better programmers.