CVE-2001-1521: Postnuke Software Foundation Postnuke

Low severity, CVSS 2.6. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in user.php in PostNuke 0.64 allows remote attackers to inject arbitrary web script or HTML via the uname parameter.

Affected products

• Postnuke Software Foundation Postnuke: version 0.62 only; version 0.63 only; version 0.64 only

Published 2001-12-31. Last modified 2026-06-16.