Drupal is a CMS, used to build personal blogs and enterprise applications as well. It is flexible to any extent as it comes with thousands of add-on modules and designs which lets one to build a website of his imagination. And new major/minor versions, modules get released often. It is wise to update one’s website as soon as they are released, for they are generally released to fix bugs or security vulnerabilities.
The Drupal has recently released 7.41 version that fixes the open redirect security vulnerability. Prior to it, there was every possibility for the malicious attackers to harvest the admin credentials through the fake login pages. And, reportedly researchers are working on Drupal 8 security issues.
