CVE-2011-1953

Published: Jun 6, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in common.php in Post Revolution before 0.8.0c-2 allow remote attackers to inject arbitrary web script or HTML via an attribute of a (1) P, a (2) STRONG, a (3) A, a (4) EM, a (5) I, a (6) IMG, a (7) LI, an (8) OL, a (9) VIDEO, or a (10) BLOCKQUOTE element.

Affected (12)

Products: Postrev: Post Revolution

Postrev

1 product

Post Revolution

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Postrev Post Revolution	Up to 0.8.0c
Postrev Post Revolution	Version 0.6.2 beta
Postrev Post Revolution	Version 0.6.3 beta
Postrev Post Revolution	Version 0.6.4
Postrev Post Revolution	Version 0.6.5
Postrev Post Revolution	Version 0.6.6
Postrev Post Revolution	Version 0.7.0 rc1
Postrev Post Revolution	Version 0.7.0 rc2
Postrev Post Revolution	Version 0.7.0 rc3
Postrev Post Revolution	Version 0.7.0 rc4
Postrev Post Revolution	Version 0.8.0 alpha
Postrev Post Revolution	Version 0.8.0b