I would be more worried on how the user was able to exploit the site with a malicious script first and foremost, sounds to me as if there is a security issue on your site/server.
If he just edited his posts and you store edit history, there is an option under the user's profile in the control panel to revert edits in the last X number of days.