I'd not worry about it. The exploit only worked in IE6 and the guy formatted the syntax for the javascript incorrectly.
If he had formatted it right, members using IE6 would of been redirected to a blank screen with his URL to the php script in your address box.
I tried his method using a preview post as not to affect any members and it didn't work, he'd made a mistake.
However I have emailed Mark with the correct method in case it is of use to bolster up site security.
If he had formatted it right, members using IE6 would of been redirected to a blank screen with his URL to the php script in your address box.
I tried his method using a preview post as not to affect any members and it didn't work, he'd made a mistake.
However I have emailed Mark with the correct method in case it is of use to bolster up site security.