CVE-2025-70458: Remyandrade Domain Availability Checker

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the unsafe innerHTML property to render domain search results.

Affected products

• Remyandrade Domain Availability Checker: version 1.0 only

Published 2026-01-23. Last modified 2026-06-17.