Cross-site scripting (XSS) vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
http://www.cvedetails.com/cve/CVE-2011-4956/
http://core.trac.wordpress.org/changeset/17583
This vulnerability affects the following application versions:
- WordPress 3.0
- WordPress 3.0.1
- WordPress 3.0.2
- WordPress 3.0.3
- WordPress 3.0.4
- WordPress 3.0.5
- WordPress 3.1