Drupal-based sites open to attack via double extension files (CVE-2020 ...