CVE-2015-4371

CVE-2015-4371 affects the Drupal Perfecto module (7.x) prior to 7.x-1.2. The vulnerability is an open redirect: an attacker can craft a URL parameter to redirect users to an attacker-controlled site, enabling phishing. Impact: credential/phishing risk for users visiting affected pages. Affected c...