Iscripts Uberforx
2 CVEs affecting Iscripts Uberforx. Latest disclosed: 2018-04-16. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-10137 | High | 8.8 | 2018-04-16 | iScripts UberforX 2.2 has CSRF in the "manage_settings" section of the Admin Panel via the /cms?section=manage_settings&action=edit URI. |
CVE-2018-10136 | Medium | 6.1 | 2018-04-16 | iScripts UberforX 2.2 has Stored XSS in the "manage_settings" section of the Admin Panel via a value field to the /cms?section=manage_settings&action=edit URI. |