The WordPress team has released WordPress 2.8.2, which fixes a XSS vulnerability. This releases fixes a issue with comment author URLs;
Comment author URLs were not fully sanitized when displayed in the admin. This could be exploited to redirect you away from the admin to another site.
It is recommended that you upgrade your version of WordPress either by downloading the newer version or using the automatic upgrade feature in the admin dashboard.