Apache Roller 6.1.3 is available
The Apache Roller project is pleased to announce the availability of Roller 6.1.3, a release that includes some minor bug fixes, dependency updates and input sanitization changes. If you run a multi-user Roller site and you do not trust your users, you should upgrade as this release fixed a couple of XSS vulnerabiltiies.
https://roller.apache.org/downloads/downloads.html
You can find some more details about the release in the vote thread here:
https://lists.apache.org/thread/xnnf63bdzmq7z08ptdptyg5c30rfvzq5
Thanks to all who helped out with this release!