Today, I got a Drupal Security Announcement email from the Drupal team. In the email, the team stated that they found multiple vulnerabitilies and weaknesses in Drupal. But neither of these vulnerabilities are readily exploitable.

Some of the vulnerabilities found includes XSS, Cross Site Request Forgeries, Session Fixation and SQL Injection.

These vulnerabilities and weakness affects all 5.x and 6.x Drupal branches, and it’s strongly advice that you update your Drupal powered site to the latest version.

Download Latest Drupal Versions (5.8 and 6.3)

• If you are running Drupal 5.x then upgrade to Drupal 5.8 (download now)
• If you are running Drupal 6.x then upgrade to Drupal 6.3 (download now)