Logintoboggan Project Logintoboggan — known CVE vulnerabilities

Every CVE whose affected-product data names Logintoboggan Project Logintoboggan, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2014-9361 — CVSS 4.3 (medium): The LoginToboggan module 7.x-1.x before 7.x-1.4 for Drupal does not properly unset the authorized user role for certain users, which allows…
• CVE-2014-9364 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the Unified Login form in the LoginToboggan module 7.x-1.x before 7.x-1.4 for Drupal allows…