[wp-testers] WP 2.1.2 Bogus Self-XSS-Injection destroys Article / Page

Dino Termini dino at duechiacchiere.it
Tue Mar 20 18:21:59 GMT 2007


Maybe it's because I have an "hacked" version of TinyMCE, ma here
everything is working fine. I just tried to replicate every step you
said, but I keep obtaining the correctly commented link.

On 3/20/07, Robin Adrianse <robin.adr at gmail.com> wrote:
> That's weird. It should treat the comments as just code.


More information about the wp-testers mailing list