gm_alex User Access Manager

• CVE-2026-19797 Medium 6.1 User Access Manager <= 2.3.18 - Reflected Cross-Site Scripting via 'tab_group_section' Parameter 0.4%
• CVE-2026-15281 Medium 6.5 User Access Manager <= 2.3.12 - Authenticated (Subscriber+) SQL Injection 0.5%
• CVE-2026-18352 High 7.5 User Access Manager <= 2.3.15 - Unauthenticated Arbitrary File Read via 'uamgetfile' Parameter 1.0%