Critical security fix in multisite module