7 matches found
CVE-2024-48624
In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...
CVE-2024-48624
DomainMOD versions prior to v4.12.0 are vulnerable to a reflected Cross-Site Scripting (XSS) vulnerability. The flaw exists in the segments edit.php page, where the segid parameter in a GET request is not properly neutralized before being included in the web page generation. This could allow an a...
CVE-2024-48624
In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...
CVE-2024-48624: Improper Neutralization of Input During Web Page Generation
In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...
CVE-2020-20990
A cross site scripting XSS vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter...
PT-2021-10570
Name of the Vulnerable Software and Affected Versions: Domainmod version 4.13 Description: A cross-site scripting XSS issue in the /segments/edit.php component allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter. This enables attackers to potentially manipulat...
CVE-2020-20990: Improper Neutralization of Input During Web Page Generation
A cross site scripting XSS vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter...