Unrated
DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field.
CVE-2018-19913
First seen on SecPulse
References
- advisory exploit-db.com
- report github.com