CVE-2018-19469

Name of the Vulnerable Software and Affected Versions ArticleCMS versions prior to 2017-02-19

Description The issue allows for XSS attacks via the "/update personal infomation" API endpoint, specifically through the realname or email parameters.

Recommendations For ArticleCMS versions prior to 2017-02-19, avoid using the realname and email parameters in the "/update personal infomation" endpoint until a fix is available. As a temporary workaround, consider restricting access to this endpoint to minimize the risk of exploitation.