BlogsWeek.com

“It’s been brought to our attention that there is a potential SQL injection bug in stylesheet.php. We were due to release 1.0.6 anyway, but this just made us rush out a release as soon as we were notified.”

If for some reason you can’t update soon, you can replace your stylesheet.php with the modified version just made available.

For additional information, please read the release announcement.