← All advisories

Medium severity4.8OSV Advisory· Published Dec 6, 2018· Updated Jun 17, 2026

CVE-2018-19892

CVE-2018-19892

Description

DomainMOD through 4.11.01 has XSS via the admin/dw/add-server.php DisplayName, HostName, or UserName field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Domainmod/Domainmod3 versions
cpe:2.3:a:domainmod:domainmod:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:domainmod:domainmod:*:*:*:*:*:*:*:*range: <=4.11.01
- (no CPE)range: v0.1.0, v0.10.0, v0.11.0, …
- (no CPE)range: <=4.11.01

Patches

Vulnerability mechanics

References

1

github.com/domainmod/domainmod/issues/85nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.