A vulnerability exists with the web version of Google photos allows malicious websites to extract the photos metadata information. Google photos will tag your photos automatically based on the metadata information such as geographic coordinates, date, etc. Researchers used an HTML link tag to create multiple cross-origin requests to the Google Photos search using javascript to measure the time it took for the onload event to trigger. The vulnerability was reported to Google by Imperva and the vulnerability has been patched now. The attack works in order to make the attack works, first, the attacker needs to trick the user to open the malicious website at the time when the user logged into Google Photos.”]