CVE-2018-12339

ArticleCMS through 2017-02-19 has XSS via an "add an article" action.

• CWE-79

• https://github.com/woider/ArticleCMS/issues/4Exploit, Issue Tracking, Third Party Advisory
• https://github.com/woider/ArticleCMS/issues/4Exploit, Issue Tracking, Third Party Advisory

Published

Jun 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12333Insufficient Verification of Data Authenticity vulnerability…
• CVE-2018-12334Protection Mechanism Failure in ECOS Secure Boot Stick (aka …
• CVE-2018-12335Incorrect access control in ECOS System Management Appliance…
• CVE-2018-12336Undocumented Factory Backdoor in ECOS Secure Boot Stick (aka…
• CVE-2018-12337Reliance on Security Through Obscurity vulnerability in ECOS…
• CVE-2018-12338Undocumented Factory Backdoor in ECOS System Management Appl…
• CVE-2018-1234RSA Authentication Agent version 8.0.1 and earlier for Web f…
• CVE-2018-1235Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoi…
• CVE-2018-12353Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name fie…
• CVE-2018-12354Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form,…
• CVE-2018-12355Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name or …6.1
• CVE-2018-12356An issue was discovered in password-store.sh in pass in Simp…