CVE-2024-48623: Domainmod

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

In queue\index.php of DomainMOD below v4.12.0, the list_id and domain_id parameters in the GET request can be exploited to cause a reflected Cross Site Scripting (XSS).

Affected products

• Domainmod Domainmod: before 4.12.0 (fixed in 4.12.0)

Published 2024-10-15. Last modified 2026-06-17.