WordPress 3.0.4 'Critical' Security Update Addresses KSES

Ahead of WordPress 3.1, the dev team has released version 3.0.4 of WordPress, available immediately through the update page in your dashboard or for download, is a "very important update" to "apply to your sites as soon as possible," because it fixes a core security bug in our HTML sanitation library, called "KSES," -- rated […]

Ahead of WordPress 3.1, the dev team has released version 3.0.4 of WordPress, available immediately through the update page in your dashboard or for download, is a "very important update" to "apply to your sites as soon as possible," because it fixes a core security bug in our HTML sanitation library, called "KSES," -- rated as "critical."

"I realize an update during the holidays is no fun, but this one is worth putting down the eggnog for. In the spirit of the holidays, consider helping your friends as well," said Matt Mullenweg.

Reference: Changesheet

[Source]