22 July 2009, 14:41
WordPress 2.8.2 closes XSS vulnerability
The Wordpress developers have released WordPress 2.8.2 to close an XSS vulnerability in previous versions. The problem in the blog publishing platform is reported to have been with comment author URLs which were not fully sanitised. This could be exploited by an attacker to redirect an administrator to another site.
The developers recommend that users either download the 2.8.2 release and install it or use WordPress's automatic update facility by selecting Tools>Upgrade from a WordPress blog's administration page.
(djwm)
Print Version | Send by email
| Permalink: http://h-online.com/-742603
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
