Limited Black Friday Offer:
DomainMOD 4.11.01 notes field - Cross-Site Scripting (XSS) CVE-2018-19751 Scanner
Remote attacker can perform a reflected cross site scripting attack (XSS) by injecting malicious payload.
Short Info
Level
Medium
Type
Single Scan
Can be used by
Asset Owner
Estimated Time
10 sec
Scan only one
Domain, Ipv4
Parent Category
DomainMOD 4.11.01 notes field - Cross-Site Scripting (XSS) CVE-2018-19751 Scanner Detail
DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields.