It does affect drupal 7 too. Reproducible: Always
@maintainers, please version bump to 6.30 and 7.26.
Bumped and vulnerable versions removed.