v5.10.4

5.10.4 (2026-11-01)

Bug Fixes

• missing _ for save_user.php in profile.php (e0f2d1d)
• ui: stop plain-text taps from opening Chrome's Touch to Search (#1298) (e0f2d1d)
• vuln: stored XSS in statistics page names and chart legend (#1298) (e0f2d1d)
• vuln: stored XSS in subscriptions list names, headings and filter menus (#1298) (e0f2d1d)