Drupal Entity List Vulnerabilities