CVE-2024-48623: 
DomainMOD vulnerability analysis and mitigation

CVE-2024-48623 affects DomainMOD versions below v4.12.0, specifically in the queue\index.php file. The vulnerability was discovered and disclosed on October 15, 2024. This security issue involves a reflected Cross-Site Scripting (XSS) vulnerability that affects the list_id and domain_id parameters in GET requests (NVD).

The vulnerability exists in the queue\index.php file where the list_id and domain_id parameters in GET requests are not properly sanitized. These parameters are directly concatenated to $_SESSION['s_message_danger'] without proper validation and are ultimately output to the frontend, enabling a reflected XSS attack. The vulnerability has been assigned a CVSS v3.1 Base Score of 5.3 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L (NVD, GitHub Issue).

If successfully exploited, this vulnerability allows attackers to execute malicious JavaScript code in the context of the victim's browser. This could potentially lead to theft of sensitive information, including cookies and session tokens, or perform actions on behalf of the victim (GitHub Issue).

The vulnerability can be exploited by crafting a malicious URL containing specially formatted list_id and domain_id parameters. A proof of concept exists demonstrating the vulnerability using the URL pattern: http://localhost/domainmod/queue/index.php?dell=1&list_id=111"onmouseover=alert(document.cookie) (GitHub Issue).

Users should upgrade to DomainMOD version 4.12.0 or later to address this vulnerability. Until the upgrade can be performed, it is recommended to implement input validation and sanitization for the list_id and domain_id parameters (NVD).