https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-28063.htmlhttps://patchthecve.com/cve/CVE-2020-28063.htmlWed, 17 Jun 2026 03:10:05 +0000CRITICAL 9.8: A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell.https://patchthecve.com/cve/CVE-2020-20092.htmlhttps://patchthecve.com/cve/CVE-2020-20092.htmlWed, 17 Jun 2026 03:02:48 +0000CRITICAL 9.8: File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Content-Type to image/jpeg and placing PHP code after the JPEG data, which could let a remote malicious user execute arbitrary PHP code.https://patchthecve.com/cve/CVE-2018-19469.htmlhttps://patchthecve.com/cve/CVE-2018-19469.htmlWed, 17 Jun 2026 01:49:21 +0000MEDIUM 6.1: ArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email parameter.https://patchthecve.com/cve/CVE-2018-12339.htmlhttps://patchthecve.com/cve/CVE-2018-12339.htmlWed, 17 Jun 2026 01:37:35 +0000MEDIUM 5.4: ArticleCMS through 2017-02-19 has XSS via an "add an article" action.