See SA-CONTRIB-2015-053 - Entity API - Cross Site Scripting (XSS)
Changes since 7.x-1.5:
See https://www.drupal.org/node/2424409 Changes Since 7.x-1.1
See SA-CONTRIB-2015-054 - SMS Framework - Cross Site Scripting (XSS).
See Administration Views - Moderately Critical - Access Bypass - SA-CONTRIB-2015-122.
Security update, not other changes. See SA-CONTRIB-2015-052 - RESTful Web Services - Access Bypass