Buyers shopping for new iPhones have found themselves scammed by criminals employing a cross site scripting vulnerability on eBay listings. Find out how to avoid being caught out by a weakness the auction marketplace should have already patched. EBay: Another Security Breach Earlier in 2014, we learned that eBay had been hacked, with millions of usernames and passwords potentially revealed to cyber criminals in a leak that the online auction service somehow failed to reveal for several months.