PT-2018-14971

Name of the Vulnerable Software and Affected Versions ArticleCMS versions prior to 2017-02-19 Description The issue allows for XSS attacks via the "/update personal infomation" API endpoint, specifically through the realname or email parameters. Recommendations For ArticleCMS versions prior to...