Articlecms Project Articlecms — known CVE vulnerabilities

Every CVE whose affected-product data names Articlecms Project Articlecms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2020-20092 — CVSS 9.8 (critical): File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Content-Type to image/jpeg and…
• CVE-2020-28063 — CVSS 9.8 (critical): A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell.
• CVE-2018-19469 — CVSS 6.1 (medium): ArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email parameter.
• CVE-2018-12339 — CVSS 5.4 (medium): ArticleCMS through 2017-02-19 has XSS via an "add an article" action.