Unknown · Post Revolution · CVE-2011-1953
**Name of the Vulnerable Software and Affected Versions**
Post Revolution versions prior to 0.8.0c-2
**Description**
The issue allows remote attackers to inject arbitrary web script or HTML via attributes of various HTML elements, including `P`, `STRONG`, `A`, `EM`, `I`, `IMG`, `LI`, `OL`, `VIDEO`, and `BLOCKQUOTE`.
**Recommendations**
For versions prior to 0.8.0c-2, update to version 0.8.0c-2 or later to resolve the issue.