Drupal critical update to fix bug with high exploitation risk

Drupal has announced a core security release scheduled for later today warning that threat actors might develop exploits within hours of the update disclosure