Drupal released the security update to fix Cross Site Scripting in Drupal core