DomainMOD through 4.11.01 has XSS via the admin/dw/add-server.php DisplayName, HostName, or UserName field.Referenceshttps://github.com/domainmod/domainmod/issues/85