CVE-2018-19898: Improper Neutralization of Special Elements used in an SQL Command

ThinkCMF X2.2.2 has SQL Injection via the method editpost in ArticleController.class.php and is exploitable by normal authenticated users via the postid1 parameter in an article editpost action...