CVE-2024-48622

A cross-site scripting (XSS) issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit.php and the cdfid parameter.

CVSS v3.1

6.6 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

EPSS

0.33% chance of exploitation in the next 30 days, 25th percentile

Published

2024-10-15

Proof-of-concept exploits (2)

• domainmod/domainmod/issues/174
• Leousum/POCFORGE

References

• CVE Record
• NVD entry

Related

• CVE-2018-1000856
• CVE-2018-11558
• CVE-2018-11559
• CVE-2018-19749
• CVE-2018-19750
• CVE-2018-19751