VULNERABILITY INTELLIGENCE

CVE-2024-48623

CVSS score5.3 MEDIUM

EPSS probability0.22%

CISA KEVNot currently listed

Published2024-10-15

Last modified2026-06-17

Description

In queue\index.php of DomainMOD below v4.12.0, the list_id and domain_id parameters in the GET request can be exploited to cause a reflected Cross Site Scripting (XSS).