Wasn't...
"Drupal" one of the Banana Splits?
See icon
Website admins are today urged to update their Drupal installations following the disclosure of a potentially serious vulnerability in the web publishing software. And when we say potentially serious, we mean, someone can potentially hack and hijack your site via this flaw. The security hole, designated CVE-2019-6340, is a …
Personal Home Page is a language designed from the start for utter beginners, and then "just grew". It hasn't been maintained with discipline, which would have caused some (well deserved IMO) loss of backward compatibility.
Utter beginners write crappy code even in good languages - the designer can't think of everything - nothing is fool proof. There is no "one weird trick" that prevents all classes of bugs.
And php in particular is still a fractal of bad design.