PT-2018-9703

Name of the Vulnerable Software and Affected Versions: iScripts UberforX version 2.2 Description: The issue concerns a Stored XSS in the manage settings section of the Admin Panel. This occurs via a value field to the "/cms?section=manage settings&action=edit" API endpoint. Recommendations: For...

PT-2018-9704

Name of the Vulnerable Software and Affected Versions: iScripts UberforX version 2.2 Description: The issue concerns a CSRF flaw in the "manage settings" section of the Admin Panel. This can be exploited via the /cms?section=manage settings&action=edit URI. Recommendations: For iScripts UberforX...