Drupal Entity Embed Vulnerabilities