CVE-2020-20988

A cross site scripting XSS vulnerability in the /domains/cost-by-owner.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "or Expiring Between" parameter...

CVE-2020-20988

DomainMOD 4.13.0 is vulnerable to Cross-Site Scripting through the reporting/domains/cost-by-owner.php endpoint, with the flaw in the "or Expiring Between" parameter. The issue allows an attacker to cause the browser to execute arbitrary JavaScript in the victim’s session (context: DomainMOD 4.13...