Cross site scripting

DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" newlastname parameter...

CVE-2018-11559

DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" newlastname parameter...

CVE-2018-11558

DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" newfirstname parameter...

CVE-2018-11558: Improper Neutralization of Input During Web Page Generation

DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" newfirstname parameter...

PT-2018-10667

Name of the Vulnerable Software and Affected Versions DomainMod version 4.10.0 Description The issue concerns a Stored XSS in the "/settings/profile/index.php" new last name parameter. Recommendations For DomainMod version 4.10.0, avoid using the new last name parameter in the...

PT-2018-10666

Name of the Vulnerable Software and Affected Versions DomainMod version 4.10.0 Description The issue concerns a Stored XSS in the "/settings/profile/index.php" new first name parameter. Recommendations For DomainMod version 4.10.0, update to a version that fixes this issue, as using the new first...