A security vulnerability was found in the web version of Google Photos that allowed malicious websites to access sensitive information regarding dates and geographical coordinates.

Various information such as geographical location, lens, and camera, referred to as metadata, is embedded into your photo files as tags. Hackers trying to access this information were able to reach location data using search queries on Google Photos through malicious websites. The vulnerability was patched by Google. ( Source )