Hundreds of millions of users may have been exposed to cross-site scripting (XSS) attacks due to a vulnerability present in Branch.io, a service used by Tinder, Shopify, Yelp and many others.
http://feedproxy.google.com/~r/Securityweek/~3/lYgJSi6XYV4/branchio-flaws-exposed-tinder-shopify-yelp-users-xss-attacks
