Unrated
DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_first_name parameter.
CVE-2018-11558
First seen on SecPulse
References
- report github.com