"...an API "bug" that allowed unauthorized persons to post not only on his page but those of an undisclosed number of other users." [read: a lot of other users]
Of course, we have to keep in mind that Facebook has an incentive to downplay the severity and the author has an incentive to hype the severity; the truth is probably somewhere in the middle. There's no reason to believe that there was mass-abuse of this issue unless someone has evidence to the contrary. At the same time, Zuckerberg's wasn't the only high profile page to have a strange status posted on it recently.