Goodreads - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Goodreads published at the 'play' market has multiple vulnerabilities...

goodreads.com XSS vulnerability

Vulnerable URL: http://www.goodreads.com/trivia/ad?adname=...