Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

CVE-2020-20988

MediumPublished

A cross site scripting (XSS) vulnerability in the /domains/cost-by-owner.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts...

Published: Aug 12, 2021
Updated: Aug 4, 2024
Assigning CNA: mitre

Primary CVSS

5.4/ 10Medium

Loading CVE intelligence

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

CVE-2020-20988

MediumPublished

A cross site scripting (XSS) vulnerability in the /domains/cost-by-owner.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts...

Published: Aug 12, 2021
Updated: Aug 4, 2024
Assigning CNA: mitre

Primary CVSS

5.4/ 10Medium

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS probability estimate

1.3%

Low · next 30 days

Percentile: 71.2%
Model date: Nov 5, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

A cross site scripting (XSS) vulnerability in the /domains/cost-by-owner.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "or Expiring Between" parameter.

Sources

Repository evidence: Files: 1 · Repositories: 1

1 Template

DomainMOD 4.13.0 - Cross-Site ScriptingTemplate
http/cves/2020/CVE-2020-20988.yaml
Nuclei Templates
DetectionEvidence observed: Sep 26, 2026Revision: 21dedc3f3d4eRelated tool
Declared conditions
- network: http($.protocol_keys)
- verification: dsl($.matchers[*].type)

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.