Vulnerabilities in Vanilla 2.5.4