[wp-testers] WP 2.1.2 Bogus Self-XSS-Injection destroys Article / Page

Robin Adrianse robin.adr at gmail.com
Tue Mar 20 16:44:13 GMT 2007


On 3/20/07, Tom Klingenberg <tklingenberg at lastflood.net> wrote:
>
> Wordpress Version 2.1.2
>
> The following Text in Code Pane within the Editor has been changed from
>
> <a href="http://example.com/?page_id=4">Linktext</a>
>
> to
>
> <!-- a href="http://example.com/?page_id=4">Linktext</a -->
>
> and was then saved. Afterwards the whole Admin page ist part of your
> editing Process... .


I'm planning to attempt to see what you mean when I get around to it, but
what do you mean...?

Maybe this problem is part of the current 2.1.3 RC as well, please check.
> _______________________________________________
> wp-testers mailing list
> wp-testers at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-testers
>


More information about the wp-testers mailing list