Articlecms · Articlecms · CVE-2018-19469
**Name of the Vulnerable Software and Affected Versions**
ArticleCMS versions prior to 2017-02-19
**Description**
The issue allows for XSS attacks via the "/update personal infomation" API endpoint, specifically through the `realname` or `email` parameters.
**Recommendations**
For ArticleCMS versions prior to 2017-02-19, avoid using the `realname` and `email` parameters in the "/update personal infomation" endpoint until a fix is available. As a temporary workaround, consider restricting access to this endpoint to minimize the risk of exploitation.