CVE-2018-10297

Name of the Vulnerable Software and Affected Versions: Discuz! versions prior to X3.4

Description: The issue is related to stored XSS via the "portal.php?mod=portalcp&ac=article" API endpoint, specifically due to mishandling of IMG elements associated with remote images.

Recommendations: For versions prior to X3.4, as a temporary workaround, consider restricting access to the "portal.php?mod=portalcp&ac=article" endpoint until a patch is available. Avoid using remote images in the IMG elements within this endpoint to minimize the risk of exploitation.