CVE-2018-20009: Domainmod

Medium severity, CVSS 4.8. EPSS: 4.4% chance of exploitation in the next 30 days.

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field.

Affected products

• Domainmod Domainmod: from 4.09.03, up to and including 4.11.01

Published 2018-12-10. Last modified 2026-06-17.