Same vulnerability on multiple regional domains

[amlnspqr]

Say "Foo ltd" has its main website foo.com and some other regional ones: foo.us, foo.de, foo.ru etc.

I found an XSS issue at foo.com, and then noticed all the other are vulnerable too.

Should I report all of them, or just foo.com is enough?

[R3NW4]

wtf question is that
duplicate is on same domain and same parameter so report all of them i have sent more than 50 jobomas subdomains all approved and patched

[x1admin]

report all