https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-48624.htmlhttps://patchthecve.com/cve/CVE-2024-48624.htmlWed, 17 Jun 2026 07:58:37 +0000MEDIUM 5.3: In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting (XSS) vulnerability.https://patchthecve.com/cve/CVE-2024-48623.htmlhttps://patchthecve.com/cve/CVE-2024-48623.htmlWed, 17 Jun 2026 07:58:37 +0000MEDIUM 5.3: In queue\index.php of DomainMOD below v4.12.0, the list_id and domain_id parameters in the GET request can be exploited to cause a reflected Cross Site Scripting (XSS).https://patchthecve.com/cve/CVE-2024-48622.htmlhttps://patchthecve.com/cve/CVE-2024-48622.htmlWed, 17 Jun 2026 07:58:37 +0000MEDIUM 6.6: A cross-site scripting (XSS) issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit.php and the cdfid parameter.