Paypal flaw used to steal data

XSS stuff. Nasty. Link here.