Security announcements

MSA-10-0011: Cross Site Scripting vulnerability in blog/index.php