info
discussion
exploit
solution
references
WordPress Unfiltered_HTML Field Name HTML Injection Vulnerability
References:
phpWordPress Web Site
(phpWordPress)
Users without unfiltered_html capability can post arbitrary html
(WordPress)
Privacy Statement
Copyright 2010, SecurityFocus