An IT security expert said the web app was using software that was known to have security flaws and people's information could be at risk.