Nick Jenkins wrote:
Please note that MediaWiki 1.6 (current stable) does NOT appear to be affected. However current SVN and the live Wikipedia are affected by this vulnerability.
As I understand it, this was fixed a few hours ago, and was present for just a few hours before that; so if you updated from SVN trunk in the last day, make sure you update again. :)
-- brion vibber (brion @ pobox.com)