See Password Policy - Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-090
Other changes since 6.x-1.10:
See SA-CONTRIB-2015-061 - Ubercart Webform Integration - Cross Site Scripting (XSS)
Changes: PHP Fatal error: Call-time pass-by-reference https://www.drupal.org/node/1899372
Conflicts with Taxonomy Super Select module https://www.drupal.org/node/846592
The first release for D6.
Thanks to:
Changes since tagged release 6.x-1.2:
Let's get stable