1F3Lse

A Stored XSS issue was found in the nickname field of the comment area, allowing for potential malicious script execution.

A SQL injection issue was found in the article management search box. The `keywords` parameter is vulnerable to this issue.

An issue was discovered in the file upload area, where a stored XSS attack can be performed via a crafted attached/file/ pathname.