Vulnerabilities in Backdrop CMS 1.6.0