CVE-2024-48624

DomainMOD versions prior to v4.12.0 are vulnerable to a reflected Cross-Site Scripting (XSS) vulnerability. The flaw exists in the segments\edit.php file, where the segid parameter in a GET request is not properly handled, allowing an attacker to execute malicious scripts in a user's browser. To ...