A new security addition in this quickly presented WordPress upgrade.
WordPress 2.8.2 fixes an XSS vulnerability. Comment author URLs were not fully sanitized when displayed in the admin. This could be exploited to redirect you away from the admin to another site.
Advertisement
Got mine done this morning, though I wonder if there’s going to be a 2.8.3, inasmuch as they’re already working on 2.9.