Hey Jeff - thanks for sharing this. Now that the vulnerability is announced, the more people see it and update the better. Thanks for including my note as well.

One quick point: while the vulnerability is a serious one, it only affects NextGEN tag cloud displays. Those are the least commonly used NextGEN display. I'd estimate that the vulnerability affects less than 5% of NextGEN installs, probably less than 1%.

Even so, we'd rather have people update quickly.

Erick (CEO, Imagely)