There is a new update for Geeklog. A cross-site scripting bug could potentially pose a security threat for your site. Users of the software are advised by the folks at Geeklog to update their software:

JPCERT/CC informed us about a possible XSS in the comment handling that we're fixing with the following releases:

• Geeklog 1.4.0sr5, available as a complete tarball and as an upgrade from 1.4.0sr4.
• Geeklog 1.3.11sr7, available as an upgrade from 1.3.11sr6 and as a combo update from any other 1.3.11 release.

Complete Story