CVE-2011-5252

Open redirect in Orchard: vulnerable in Users/Account/LogOff where ReturnUrl parameter can redirect to arbitrary sites. Affected: Orchard 1.0.x < 1.0.21, 1.1.x < 1.1.31, 1.2.x < 1.2.42, 1.3.x