CVE-2023-38476

23th percentile - higher than 23% of all known CVEs

The SuiteDash Direct Login plugin in versions up to 1.7.6 has a stored Cross-Site Scripting (XSS) vulnerability with admin authorization. An attacker can exploit this flaw to inject malicious scripts that will execute in the victim's browser context.

Organizations may be exposed to data theft, session hijacking, and other security-related attacks, potentially leading to serious legal and reputational consequences.

It is recommended to update the SuiteDash Direct Login plugin to the latest version to mitigate this vulnerability and conduct a security audit of the application.