2.1. Anything with 2.1 or higher (maybe even 2.05) is vulnerable. 2.3 won't fix it as even they have been hit. I downloaded a patch at a site and that didn't help me or others either.
I have a link in my blogroll about exchanging links. It makes it easy since other bloggers will just automatically contact me if they are looking at my blogroll.
Just to let you know that in wordpress I got hit on all my blogs where someone inserted spam links through an exploit. THe only way I could deal with it(the wordpress fix didn't work) was I had to re ...