CVE-2011-5041

Pulse Pro CMS 1.7.2 contains multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the (1) d parameter in a blocks action and (2) post_id parameter in an edit-post action to index.php. The available connected documents corrobora...