3 matches found
CVE-2018-20009
DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field...
4.8CVSS0.04428EPSS
SaveExploits6References2
PT-2018-15233
Name of the Vulnerable Software and Affected Versions DomainMOD version 4.11.01 Description The issue allows for XSS via the "SSL Provider Name" or "SSL Provider URL" field in the assets/add/ssl-provider.php page. Recommendations For DomainMOD version 4.11.01, update to a newer version that...
4.8CVSS0.04428EPSS
SaveExploits6References4
CVE-2018-20009: Improper Neutralization of Input During Web Page Generation
DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field...
4.8CVSS7.7AI score0.04428EPSS
SaveExploits6References2
20