I believe there is a patch available for this problem but I have not been able to locate it. Any ideas?
I have applied BAKA's temporary fix which is working fine for now
(ie. Replacing [ name="return" value="' . htmlspecialchars( $login ) . '" ] with [ name="return" value="' . $login . '" ] on line #512 of "modules/mod_cblogin/mod_cb_login.php" )