Well, thank you all for your advices. It's been an interesting discussion.

As it is only a small shop, I think I will email them again, but this time with a link that point to a more verbose version of the vulnerability, as someone mention.