Hacker News Reader

This is a critical security release. The cross-site scripting vulnerability lets a commenter compromise your website.

The exploit is described and demonstrated in a video on the site of the discoverer: http://klikki.fi/adv/wordpress2.html