The rise of open source, and the skyrocketing popularity of Drupal as a CMS, has made for many very happy developers working in the open source world. But for some people, it isn’t just a hobby or a way to bring home a paycheck: it’s a ticket out of crushing poverty.

Advisory ID: DRUPAL-SA-CORE-2014-002 Project: Drupal core Version: 6.x, 7.x Date: 2014-April-16 Security risk: Moderately critical Exploitable from: Remote Vulnerability: Information Disclosure Description Drupal's form API has built-in support for temporary storage of form state, for example user input. This is often used on multi-step forms, and is required on Ajax-enabled forms in order to …