CVE-2018-19469

ArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email parameter.

Source: CVE-2018-19469