CVE-2018-19892: Domainmod

Medium severity, CVSS 4.8. EPSS: 1.5% chance of exploitation in the next 30 days.

DomainMOD through 4.11.01 has XSS via the admin/dw/add-server.php DisplayName, HostName, or UserName field.

Affected products

• Domainmod Domainmod: up to and including 4.11.01

Published 2018-12-06. Last modified 2026-06-17.