CVE-2011-5041: Multiple cross-site scripting (XSS) vulnerabilities in Pulse Pro CMS 1.7.2 allow remote attackers to inject...

Security readout for executives and security teams

CVE-2011-5041 is a legacy cross-site scripting issue reported in Pulse Pro CMS 1.7.2. An attacker could inject web script or HTML through specific index.php parameters. Business risk depends on whether this old CMS version is still internet-facing or reachable by users with trusted sessions. Exposure is most likely on legacy sites still running Pulse Pro CMS 1.7.2, especially public or authenticated CMS paths that process index.php actions. The provided affected-product metadata is incomplete, so inventory confirmation is required. Prioritize if Pulse Pro CMS 1.7.2 is still in production or exposed to the internet. For most organizations this is likely a legacy cleanup item, but active exposure can create account-session and content-integrity risk. Mitigation focus: Identify and retire or upgrade any Pulse Pro CMS 1.7.2 deployments.; Check vendor or trusted advisory guidance for fixed versions or official workarounds.; Restrict access to CMS editing and block-management paths where feasible..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.