PayPal plugs phishing-enabling vulnerability, stumps up $500 • The Register

http://www.theregister.co.uk/2016/04/01/paypal_plugs_phishing_vulnerability/