CVE-2020-20988

Name of the Vulnerable Software and Affected Versions: Domainmod version 4.13

Description: A cross-site scripting (XSS) issue exists in the /domains/cost-by-owner.php component, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload in the or Expiring Between parameter.

Recommendations: For Domainmod version 4.13, as a temporary workaround, consider restricting access to the /domains/cost-by-owner.php component until a patch is available. Avoid using the or Expiring Between parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.