Project: 
Services single sign-on client
Date: 
2017-November-29
Security risk: 
Critical 16∕25 AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: 
Cross-site scripting
Description: 

This module allows users of a remote Services-enabled Drupal site to sign on to a second site with their credentials.

The module does not sanitize information from the request before displaying it, thereby exposing a cross-site scripting vulnerability.

Solution: 

Install the latest version:

Reported By: 
Fixed By: 
Coordinated By: