2 matches found
Cross site scripting
DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" newlastname parameter...
CVE-2018-11558: Improper Neutralization of Input During Web Page Generation
DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" newfirstname parameter...