Skip to content

CVE-2018-19752 DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.

MediumCVSS 4.8 EPSS 3.3% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.

Affected products

ProductAffected versionsFixed in
domainmod >= 4.09.03, <= 4.11.01 No fix listed

References

  • github.com exploit third-party-advisory
  • 45949 exploit third-party-advisory vdb-entry