CVE-2023-38518

23th percentile - higher than 23% of all known CVEs

The Visualmodo Borderless plugin versions up to 1.4.8 contain a stored Cross-Site Scripting (XSS) vulnerability with admin authorization. An attacker can exploit this flaw to inject malicious scripts that will execute in the context of users with admin privileges.

Exploitation of this vulnerability could lead to the compromise of admin accounts and allow attackers to perform unauthorized actions within the system. This may result in serious consequences for the organization's data security.

It is recommended to update the Visualmodo Borderless plugin to the latest version to mitigate this vulnerability. Additionally, conducting a security audit to identify potential threats is advisable.