[ Thanks to SMK for this link.
]
“From the ‘Next Stop: 3.1 and PHP 4?!’ files:
“The open source WordPress blogging platform is out with version
3.0.5, a new update fixing at least five security issues.“Two of the issues are Cross Site Scripting (XSS) flaws which I
personally consider to be serious. WordPress considers the issues
to be *moderate*. In general for me, an XSS flaw that can be
triggered by non-admins is a serious issue.”