Drupal OpenID Module XSS

Application: Drupal
Affected Version: prior to 5x.-1.2.
Vendor’s URL: Drupal OpenID Module
Bug Type: Cross Site Scripting
Risk Level: Medium

Solution:
Update to version 5x.-1.2.
http://drupal.org/node/280593