CVE-2014-9737

Open redirect in Drupal Language Switcher Dropdown module (7.x-1.x) prior to 7.x-1.4. The module does not validate the redirect URL in the block, allowing attackers to redirect users to arbitrary sites and facilitate phishing. Affected: Drupal 7.x-1.x versions before 7.x-1.4. Mitigation: upgrade ...