Improper Access Control

publifycore is vulnerable to improper access control. The vulnerability exists in notifyuserviaemail function in article.rb due to lack of validations in comment field which allows an attacker to view data and perform unauthorized actions...