CVE-2013-0317

CVE-2013-0317 is a cross-site scripting (XSS) vulnerability in the Drupal contributed module Manager Change for Organic Groups (og_manager_change) for 7.x-2.x, fixed in 7.x-2.1. The issue arises because the autocomplete field used to select a new manager did not properly filter usernames, allowin...