Update notes for submitted changes

* Fix multiple Cross-Site Scripting (XSS) vulnerabilities