modxcms/revolution — pull request #11165 by davidpede (2014-02-28 13:56:33+00:00)
Title: Login error handling message for invalid username

Username error message shows which user accounts are configured. Attacker can guess the username. Message should be more generic so that an attacker cannot guess a configured user account.