Drupal Entity Browser Vulnerabilities