WWE - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application WWE published at the 'play' market has multiple vulnerabilities...

wwe.com XSS vulnerability

Vulnerable URL: http://www.wwe.com/events/all/%22%3E%3CIMG%20%22%22%22%3E%3CSCRIPT%3Ealert%28%22XSSPOSED%22%29%3C/SCRIPT%3E%22%3E Details: Description| Value ---|--- Patched:| Yes, at 22.08.2015 Latest check for patch:| 22.08.2015 01:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

wwe.com XSS vulnerability

Vulnerable URL: http://www.wwe.com/events/all/TUNOMBRE/" Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1633 Google Pagerank| 6 VIP website status:| Yes...