Vulnerabilities in gm_alex

3 results

CVE-2026-18352HIGHUser Access Manager <= 2.3.15 - Unauthenticated Arbitrary File Read via 'uamgetfile' ParameterEPSS 1.0%CVE-2026-15281MEDIUMUser Access Manager <= 2.3.12 - Authenticated (Subscriber+) SQL InjectionEPSS 0.5%CVE-2026-19797MEDIUMUser Access Manager <= 2.3.18 - Reflected Cross-Site Scripting via 'tab_group_section' ParameterEPSS 0.4%