Drupal patches bad bugs
Drupal has patched two critical vulnerabilities in version 8 of the content management system. The bugs include a cross-site scripting flaw and another allowing non-admin but privileged users to download data configuration reports. Other flaws allowed some attackers to expose comments to different levels of visibility. …
