WordPress 2.8.2 has been released just 11 days after WordPress 2.8.1. Today’s entry on the official WordPress blog warns us of an “XSS vulnerability” that could cause comment author URLs to be exploited to redirect you away from the admin to another site.
