CVE-2018-19914

DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field...

CVE-2018-19914: Improper Neutralization of Input During Web Page Generation

DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field...

PT-2018-15161

Name of the Vulnerable Software and Affected Versions DomainMOD versions prior to 4.12 Description The issue allows for XSS attacks via the Profile Name or notes field in the assets/add/dns.php file. Recommendations For DomainMOD versions prior to 4.12, update to version 4.12 or later to resolve...