BharatMatrimony - Matrimonial - Customized SSL, Hardcoded secrets, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application BharatMatrimony - Matrimonial published at the 'play' market has multiple vulnerabilities...

Unfixed XSS vulnerability at profile.bharatmatrimony.com

Security researcher haRI, has submitted on 03/07/2010 a cross-site-scripting XSS vulnerability affecting profile.bharatmatrimony.com, which at the time of submission ranked 3141 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...