Unrated
DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields.
CVE-2018-19750
First seen on SecPulse
References
- report github.com
- report exploit-db.com