CVE-2018-10136 iScripts UberforX 2.2 has Stored XSS in the "manage_settings" section of the Admin Panel via a value field to the /cms?section=manage_settings&action=edit URI.
MediumCVSS 6.1
EPSS 0.67%
- Published
- Updated
- Exploit status
- No public exploit known
Description
iScripts UberforX 2.2 has Stored XSS in the "manage_settings" section of the Admin Panel via a value field to the /cms?section=manage_settings&action=edit URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iscripts uberforx | = 2.2 | No fix listed |
References
- pastebin.com exploit third-party-advisory