CVE-2018-19137

DomainMOD 4.11.01 is vulnerable to a reflected cross-site scripting (XSS) flaw in assets/edit/ip-address.php via the ipid parameter. Successful exploitation could allow injected JavaScript to run in the victim’s browser, enabling session hijacking or page defacement. The issue stems from improper...