DomainMOD versions 4.11.01 and below suffer from a cross site scripting vulnerability in ssl-accounts.php. Continue reading...