CVE-2018-19913

DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field.

• CWE-79

• https://github.com/domainmod/domainmod/issues/86Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/45967/Third Party Advisory, VDB Entry
• https://github.com/domainmod/domainmod/issues/86Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/45967/Third Party Advisory, VDB Entry

Published

Dec 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19905HTML injection exists in razorCMS 3.4.8 via the /#/page keyw…5.4
• CVE-2018-19906Stored XSS exists in razorCMS 3.4.8 via the /#/page descript…5.4
• CVE-2018-19907A Server-Side Template Injection issue was discovered in Cra…
• CVE-2018-19908An issue was discovered in MISP 2.4.9x before 2.4.99. In app…
• CVE-2018-1991IBM API Connect 5.0.0.0, and 5.0.8.6 could could return sens…2.7
• CVE-2018-19911FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allow…
• CVE-2018-19914DomainMOD through 4.11.01 has XSS via the assets/add/dns.php…
• CVE-2018-19915DomainMOD through 4.11.01 has XSS via the assets/edit/host.p…
• CVE-2018-19917Microweber 1.0.8 has reflected cross-site scripting (XSS) vu…
• CVE-2018-19918CuppaCMS has XSS via an SVG document uploaded to the adminis…5.4
• CVE-2018-19919Pixelimity 1.0 has Persistent XSS via the admin/portfolio.ph…
• CVE-2018-1992The IBM Power 9 OP910, OP920, and FW910 boot firmware's boot…6.4