Patch Release 4.1.3 contains an important '''security fix''' for a “reflected XSS” attack.
Announcement/XSS attack# 5dc14e923bf18c8678058e37b96c2a5a