Security Advisory

CVE-2011-5041

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-12-30 19:00:00
Last updated 2024-08-07 00:23:39
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Pulse Pro CMS 1.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) d parameter in a blocks action and (2) post_id parameter in an edit-post action to index.php.