diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html
index d52a9d3c98..982dd5cf60 100644
--- a/phpBB/docs/CHANGELOG.html
+++ b/phpBB/docs/CHANGELOG.html
@@ -96,6 +96,11 @@
1.i. Changes since 3.0.12
+Security
+
+- [PHPBB3-13531] - Disallow trailing paths (e.g. using the PATH_INFO feature) to prevent path-relative CSS injection
+- [PHPBB3-13526] - Correctly validate ucp_pm_options form key
+
Bug
- [PHPBB3-6703] - Problem with russian letter while converting from 2.0.x
@@ -177,7 +182,6 @@
- [PHPBB3-13376] - deregister_globals() does not work correctly when $_COOKIE['GLOBALS'] - is specified
- [PHPBB3-13519] - Correctly validate imagick path as path and not string
- [PHPBB3-13523] - PHP 5.2 Unit Tests no longer work due to deprecated PHPUnit PEAR channel
-- [PHPBB3-13526] - Correctly validate ucp_pm_options form key
- [PHPBB3-13527] - Escape information received from version server
Improvement
@@ -200,7 +204,6 @@
[PHPBB3-12247] - include poster's username in email notifications of posts that get approved by moderators
[PHPBB3-12259] - Too many redundant tests are run on Travis
[PHPBB3-12468] - Allow mbstring.http_input='' besides 'pass' for PHP 5.6 compatibility
-[PHPBB3-13531] - Disallow trailing paths (e.g. using the PATH_INFO feature)
Task