https://seguridadpy.info/2019/03/vulnerabilidad-de-cross-site-scripting-en-el-core-de-drupal/