Drupal developers are urged to patch a bug that allows attackers to take over a site simply by visiting it.
Source: Threadpost