VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 6, 2011· Updated Apr 29, 2026

CVE-2011-1953

CVE-2011-1953

Description

Multiple cross-site scripting (XSS) vulnerabilities in common.php in Post Revolution before 0.8.0c-2 allow remote attackers to inject arbitrary web script or HTML via an attribute of a (1) P, a (2) STRONG, a (3) A, a (4) EM, a (5) I, a (6) IMG, a (7) LI, an (8) OL, a (9) VIDEO, or a (10) BLOCKQUOTE element.

Affected products

12
  • Postrev/Post Revolution12 versions
    cpe:2.3:a:postrev:post_revolution:*:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:postrev:post_revolution:*:*:*:*:*:*:*:*range: <=0.8.0c
    • cpe:2.3:a:postrev:post_revolution:0.6.2:beta:*:*:*:*:*:*
    • cpe:2.3:a:postrev:post_revolution:0.6.3:beta:*:*:*:*:*:*
    • cpe:2.3:a:postrev:post_revolution:0.6.4:*:*:*:*:*:*:*
    • cpe:2.3:a:postrev:post_revolution:0.6.5:*:*:*:*:*:*:*
    • cpe:2.3:a:postrev:post_revolution:0.6.6:*:*:*:*:*:*:*
    • cpe:2.3:a:postrev:post_revolution:0.7.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:postrev:post_revolution:0.7.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:postrev:post_revolution:0.7.0:rc3:*:*:*:*:*:*
    • cpe:2.3:a:postrev:post_revolution:0.7.0:rc4:*:*:*:*:*:*
    • cpe:2.3:a:postrev:post_revolution:0.8.0:alpha:*:*:*:*:*:*
    • cpe:2.3:a:postrev:post_revolution:0.8.0b:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.