CVE-2018-10136: Iscripts Uberforx

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

iScripts UberforX 2.2 has Stored XSS in the "manage_settings" section of the Admin Panel via a value field to the /cms?section=manage_settings&action=edit URI.

Affected products

• Iscripts Uberforx: version 2.2 only

Published 2018-04-16. Last modified 2026-06-17.