Lucene search
+L

7 matches found

Mend
Mend
•added 2024/10/15 12:00 a.m.•5 views

CVE-2024-48624

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...

5.3CVSS0.00222EPSS
SaveExploits1References3
CVE
CVE
•added 2024/10/15 12:00 a.m.•108 views

CVE-2024-48624

DomainMOD versions prior to v4.12.0 are vulnerable to a reflected Cross-Site Scripting (XSS) vulnerability. The flaw exists in the segments edit.php page, where the segid parameter in a GET request is not properly neutralized before being included in the web page generation. This could allow an a...

5.3CVSS6AI score0.00222EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/15 12:00 a.m.•19 views

CVE-2024-48624

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...

6.2AI score0.00222EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/15 12:00 a.m.•7 views

CVE-2024-48624: Improper Neutralization of Input During Web Page Generation

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...

5.3CVSS7.7AI score0.00222EPSS
SaveExploits1References1
Mend
Mend
•added 2021/08/12 9:07 p.m.•4 views

CVE-2020-20990

A cross site scripting XSS vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter...

5.4CVSS0.00595EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/08/12 12:00 a.m.•5 views

PT-2021-10570

Name of the Vulnerable Software and Affected Versions: Domainmod version 4.13 Description: A cross-site scripting XSS issue in the /segments/edit.php component allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter. This enables attackers to potentially manipulat...

5.4CVSS0.00595EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/12 12:00 a.m.•11 views

CVE-2020-20990: Improper Neutralization of Input During Web Page Generation

A cross site scripting XSS vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter...

5.4CVSS5.6AI score0.00595EPSS
SaveExploits1References2
Rows per page
Query Builder