CVE-2018-10137: Iscripts Uberforx

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

iScripts UberforX 2.2 has CSRF in the "manage_settings" section of the Admin Panel via the /cms?section=manage_settings&action=edit URI.

Affected products

• Iscripts Uberforx: version 2.2 only

Published 2018-04-16. Last modified 2026-06-17.