CVE-2007-3818

CVE-2007-3818 details a cross-site scripting (XSS) vulnerability in the Drupal LoginToboggan module (versions 5.x-1.x-dev before 20070712). The issue allows remote authenticated users who have the administer blocks permission to inject arbitrary JavaScript by manipulating the message displayed ab...