diff --git a/docs/en/changelogs/3.1.3.md b/docs/en/changelogs/3.1.3.md
deleted file mode 100644
index 7cb25627a..000000000
--- a/docs/en/changelogs/3.1.3.md
+++ /dev/null
@@ -1,16 +0,0 @@
-# 3.1.3
-
-## Overview
-
- * Better loading performance when using multiple `UploadField` instances
- * Option for `force_js_to_bottom` on `Requirements` class (ignoring inline `<script>` tags)
- * Added `ListDecorator->filterByCallback()` for more sophisticated filtering
- * New `DataList` filters: `LessThanOrEqualFilter` and `GreaterThanOrEqualFilter`
- * "Cancel" button on "Add Page" form
- * Better code hinting on magic properties (for IDE autocompletion)
- * Increased Behat test coverage (editing HTML content, managing page permissions)
- * Support for PHPUnit 3.8
-
-## Upgrading
-
-## Changelog
\ No newline at end of file
diff --git a/docs/en/changelogs/rc/3.1.3-rc1.md b/docs/en/changelogs/rc/3.1.3-rc1.md
index 7dd18cbf2..3e0c2233f 100644
--- a/docs/en/changelogs/rc/3.1.3-rc1.md
+++ b/docs/en/changelogs/rc/3.1.3-rc1.md
@@ -1,13 +1,23 @@
-# 3.1.3-rc1
+# 3.1.3
 
 ## Overview
 
- * ExtraMeta fields can now only contain `meta` and `link` elements
+ * Security: Require ADMIN for ?flush=1&isDev=1 ([SS-2014-001](http://www.silverstripe.org/ss-2014-001-require-admin-for-flush1-and-isdev1))
+ * Security: XSS in third party library (SWFUpload) ([SS-2014-002](http://www.silverstripe.org/ss-2014-002-xss-in-third-party-library-swfupload/))
+ * Security: SiteTree.ExtraMeta allows JavaScript for malicious CMS authors ([SS-2014-003](http://www.silverstripe.org/ss-2014-003-extrameta-allows-javascript-for-malicious-cms-authors-/))
+ * Better loading performance when using multiple `UploadField` instances
+ * Option for `force_js_to_bottom` on `Requirements` class (ignoring inline `<script>` tags)
+ * Added `ListDecorator->filterByCallback()` for more sophisticated filtering
+ * New `DataList` filters: `LessThanOrEqualFilter` and `GreaterThanOrEqualFilter`
+ * "Cancel" button on "Add Page" form
+ * Better code hinting on magic properties (for IDE autocompletion)
+ * Increased Behat test coverage (editing HTML content, managing page permissions)
+ * Support for PHPUnit 3.8
 
 ## Upgrading
 
-### ExtraMeta fields can now only contain `meta` and `link` elements
+### SiteTree.ExtraMeta allows JavaScript for malicious CMS authors
 
-Previously ExtraMeta fields could contain any HTML elements. From 3.1.3-rc1 the contents are filtered
-on write to only allow `meta` and `link` elements. The first time after upgrading that you save a page
-that has other elements in ExtraMeta they will be deleted.
+If you have previously used the `SiteTree.ExtraMeta` field for `<head>` markup
+other than its intended use case (`<meta>` and `<link>`), please consult
+[SS-2014-003](http://www.silverstripe.org/ss-2014-003-extrameta-allows-javascript-for-malicious-cms-authors-/).
\ No newline at end of file
