Threat database

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.2%	CVE-2024-48624domainmod · n/a Medium5.3EPSS 0.2%2024-10-15CVE Database V5CVE-2024-48624 In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting (XSS) vulnerability. EPSS 0.2%Vulnerability	CVE Database V5	2024-10-15
Medium	5.3	EPSS 0.2%	CVE-2024-48623domainmod · n/a Medium5.3EPSS 0.2%2024-10-15CVE Database V5CVE-2024-48623 In queue\index.php of DomainMOD below v4.12.0, the list_id and domain_id parameters in the GET request can be exploited to cause a reflected Cross Site Scripting (XSS). EPSS 0.2%Vulnerability	CVE Database V5	2024-10-15
Medium	6.6	EPSS 0.3%	CVE-2024-48622domainmod · n/a Medium6.6EPSS 0.3%2024-10-15CVE Database V5CVE-2024-48622 A cross-site scripting (XSS) issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit.php and the cdfid parameter. EPSS 0.3%Vulnerability	CVE Database V5	2024-10-15

Page 1 of 1