CVE-2018-10137

Name of the Vulnerable Software and Affected Versions: iScripts UberforX version 2.2

Description: The issue concerns a CSRF flaw in the "manage settings" section of the Admin Panel. This can be exploited via the /cms?section=manage settings&action=edit URI.

Recommendations: For iScripts UberforX version 2.2, consider implementing proper CSRF protection mechanisms, such as tokens, to prevent unauthorized modifications to settings in the Admin Panel. As a temporary workaround, restrict access to the /cms?section=manage settings&action=edit URI to minimize the risk of exploitation.