How do I use the patch to 1.3.7

I see there is a patch to 1.3.7
Im trying to upgrade from 1.3.5, but dont know if I need to use the patch as well as the 1.3.7 full set.
If I need the patch, when and how do I use it please.
Thanks

zen-cart-v1.3.7-full-fileset-12302006.zip
zen-cart-v1.3.7-xss-patch.zip

Upgrade TO 1.3.7 THEN apply the patch (although check the readme first)

Thanks for replying RYK
I wasnt sure if I should patch before uploading, and the sensitivity of the software in other areas where changes are made makes me nervous!
I dont understand why I cant patch before uploading, but. whatever, Ill do it as suggested.

cheers

I think you CAN with this one - that's why I suggested you check the readme.

The readme.txt actually confirms your original suggestion, but doesn't say its ok to patch first then upload.

viz.
"To combat a possible XSS exploit vulnerability in Zen Cart, simply copy the enclosed files to your v1.3.7 website."

Ive uploaded now 1.3.7 , and will follow the readme advice on the patch.

Thanks for helping.
Cheers.