Cross-site scripting (XSS) vulnerability in WordPress before 2.6, SVN development versions only, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

More... (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3233)