WordPress has released a critical update (3.0.4). It fixes a core security bug in our HTML sanitation library, called KSES.   The download is available  through the update page in your dashboard or from http://wordpress.org/download/ .

As always as I stated in a previous post ensure you have a backup of your files an database before you install the update. It does replace the style.css.