CVE-2011-1954: Postrev Post Revolution

Medium severity, CVSS 6.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests to (1) ajax-weblog-guardar.php, (2) verpost.php, (3) comments.php, or (4) perfil.php.

Affected products

• Postrev Post Revolution: up to and including 0.8.0c-2; version 0.6.2 only; version 0.6.3 only; version 0.6.4 only; version 0.6.5 only; version 0.6.6 only; …

Published 2011-06-06. Last modified 2026-06-16.