## javascript insertion via meta tags
Raúl Benencia discovered an additional XSS exposure in the meta plugin.
+([[!cve CVE-2012-0220]])
This hole was discovered on 16 May 2012 and fixed the same day with
-the release of ikiwiki 3.20120516.
+the release of ikiwiki 3.20120516. A fix was backported to Debian squeeze,
+as version 3.20100815.9. An upgrade is recommended for all sites.