A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the unsafe innerHTML property to render domain search results.
References
| Link | Resource |
|---|---|
| https://github.com/ismaildawoodjee/vulnerability-research/security/advisories/GHSA-chm7-vgf7-6f9p | Exploit Third Party Advisory |
| https://www.sourcecodester.com/php/18500/domain-availability-checker-using-php-and-javascript-source-code.html | Product |
Configurations
History
30 Jan 2026, 17:59
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Remyandrade domain Availability Checker
Remyandrade |
|
| CPE | cpe:2.3:a:remyandrade:domain_availability_checker:1.0:*:*:*:*:*:*:* | |
| References | () https://github.com/ismaildawoodjee/vulnerability-research/security/advisories/GHSA-chm7-vgf7-6f9p - Exploit, Third Party Advisory | |
| References | () https://www.sourcecodester.com/php/18500/domain-availability-checker-using-php-and-javascript-source-code.html - Product |
26 Jan 2026, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
23 Jan 2026, 22:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-23 22:16
Updated : 2026-01-30 17:59
NVD link : CVE-2025-70458
Mitre link : CVE-2025-70458
CVE.ORG link : CVE-2025-70458
JSON object : View
Products Affected
remyandrade
- domain_availability_checker
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')