CVE-2018-9205: drupal avatar uploader – CVSS 7.5 · Watchpost