diff --git a/doc/CHANGELOG b/doc/CHANGELOG
index 36d032d..24af2b7 100644
--- a/doc/CHANGELOG
+++ b/doc/CHANGELOG
@@ -8,6 +8,9 @@ http://www.redmine.org/
 
 * Defect #22808: Malformed SQL query with SQLServer when grouping and sorting by fixed version
 * Defect #22912: Selecting a new filter on Activities should not reset the date range
+* Defect #22924: Persistent XSS in Markdown parsing
+* Defect #22925: Persistent XSS in project homepage field
+* Defect #22926: Persistent XSS in Textile parsing
 * Defect #22932: "Group by" row from issues listing has the colspan attribute bigger with one than the number of columns from the table
 * Patch #22427: pt-BR translation for 3.2.stable
 * Patch #22761: Korean translation for 3.2-stable