CVE-2019-15811: Improper Neutralization of Input During Web Page Generation

In DomainMOD through 4.13, the parameter daterange in the file reporting/domains/cost-by-month.php has XSS...