A highly critical Drupal core flaw affects multiple supported versions, with exploitation expected shortly after disclosure.