Wordpress exploit for all shortstat users

[Jace]

Found it this morning and after a little investigative work I have figured out the issue....shortstat allows iframe code in the referrers table

read more on my blog
http://www.justjace.com/2008/05/09/i...isable-it-now/

[Jace]

bump in case some people didn't know