Project: 
Super Login
Project machine name: 
super_login
Date: 
2019-August-14
Security risk: 
Moderately critical 13 ∕ 25 AC:Basic/A:Admin/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: 
Cross site scripting
Affected versions: 
<1.3.0
Description: 

This module improves the Drupal login page with the new features and layout.

The module doesn't sufficiently filter input text in the administration pages text configuration inputs. For example, the login text field.

The vulnerability is mitigated by the fact it can only be exploited by a user with the "Administer super login" permission.

Solution: 

Install the latest version:

Also see the Super Login project page.

Reported By: 
Fixed By: 
Coordinated By: