A new 3.1.2 Plumi package has been released including an important security patch addressing an XSS vulnerability. Please update your Plumi 3.x sites immediately.

You can download a tar.gz of the package here.

This vulnerability was discovered by Andy Nicholson of Infinite Recursion. Thanks Andy!