WordPress 2.8.2 was released on Monday, July 20 which patches a known XSS vulnerability. The URLs for the commenters(comment authors) were not fully sanitized before being displayed in the admin area which could be exploited to redirect from the admin area to another site. It is recommended to download and upgrade to version 2.8.2 or use the automatic upgrade function of WordPress under Tools > Upgrade from the admin area.
Related posts:
Thanks for the heads up. It’s been a crazy summer so far so I hope all the crazymaking is done. Although I am shy about commenting, l appreciate your blog posts. I just went through a nightmarish situation 2 weeks ago when my web host’s servers (A Small Orange) were hacked. Their staff was excellent and my site was restored from backup.
I have updated already with no problems. Good to know that the security problem has been fixed.