CVE-2024-48624: Domainmod

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting (XSS) vulnerability.

Affected products

• Domainmod Domainmod: before 4.12.0 (fixed in 4.12.0)

Published 2024-10-15. Last modified 2026-06-17.