CVE:CVE-2011-1953
CNNVD:CNNVD-201106-031
Post Revolution 0.8.0c-2之前版本中的common.php中存在多个跨站脚本攻击漏洞。远程攻击者可以借助（1）P，（2）STRONG，（3）A，（4）EM，（5）I，（6）IMG，（7）LI，（8）OL，（9）VIDEO或者（10）BLOCKQUOTE元素的属性注入任意web脚本或者HTML。
solution:Upgrade postrev post_revolution to a higher version than 0.8.0c,0.6.2:beta,0.6.3:beta,0.6.4,0.6.5,0.6.6,0.7.0:rc1,0.7.0:rc2,0.7.0:rc3,0.7.0:rc4,0.8.0:alpha,0.8.0b,and avoid the version (,0.8.0c],0.6.2:beta,0.6.3:beta,0.6.4,0.6.5,0.6.6,0.7.0:rc1,0.7.0:rc2,0.7.0:rc3,0.7.0:rc4,0.8.0:alpha,0.8.0b