Vulnerabilities in Backdrop CMS 1.9.6