← back
CVE-2018-19913

CVE-2018-19913

EPSS 1.8%
DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/45967/unverifiedexploitdbwww.exploit-db.com/exploits/45967unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/domainmod/domainmod/issues/86https://www.exploit-db.com/exploits/45967/