2 matches found
CVE-2018-19469
ArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email parameter.
CVE-2018-12339
ArticleCMS through 2017-02-19 has XSS via an "add an article" action.