Skip to content

CVE-2018-20009 DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field.

MediumCVSS 4.8 EPSS 4.4%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field.

Affected products

ProductAffected versionsFixed in
domainmod >= 4.09.03, <= 4.11.01 No fix listed

References

  • github.com exploit third-party-advisory
  • 46372 exploit third-party-advisory vdb-entry