CVE-2023-38518
CVSS 3.1 Score 4.8 of 10 (medium)
Details
Published Sep 3, 2023
Updated: Sep 8, 2023
CWE ID 79
Summary
CVE-2023-38518 is a stored Cross-Site Scripting (XSS) vulnerability impacting the Visualmodo Borderless plugin versions 1.4.8 and below. An attacker can exploit this admin privilege vulnerability by injecting malicious scripts into a targeted website. Successful exploitation may result in unauthorized access or data theft, and potentially escalate to more severe attacks. Users are strongly advised to update their plugin to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.