DomainMOD versions 4.11.01 and below suffer from a cross site scripting vulnerability in registrar-account.php. Continue reading...