VULNERABILITY INTELLIGENCE

CVE-2011-5041

CVSS score4.3 MEDIUM

EPSS probability1.49%

CISA KEVNot currently listed

Published2011-12-30

Last modified2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Pulse Pro CMS 1.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) d parameter in a blocks action and (2) post_id parameter in an edit-post action to index.php.