Drupal.org announced a critical core vulnerability that allows attackers to exploit multiple attack vectors on a site. Full details on what to do next.