Drupal Entity Reference Manager (merge Entities) Vulnerabilities