Security hole in coppermine.

There has been an important fix to coppermine to prevent a Cross Site Scripting hack. The patch and discussion can be found at the Coppermine forums. I am surprised that they do not have a (working) announcement mailing list to find out when patches such as this are released. Update A workaround is to go to the forums and click the notify button. You will probably need to be logged in though.