Newscoop 3.5.1 was released as a security update to 3.5 today. It fixes an XSS vulnerability in the admin login page plus front end vulnerablities to Cross-Site Scripting attacks (plus some other small improvements and bugfixes). Upgrading is recommended.