CVE-2018-12339

ArticleCMS through 2017-02-19 has XSS via an "add an article" action...