CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visualmodo Borderless borderless allows Cross-Site Scripting (XSS).This issue affects Borderless: from n/a through <= 1.5.8.
Explanation of Vulnerability in Simple Terms
Borderless versions up to 1.5.8 contain a cross-site scripting (XSS) vulnerability that allows authenticated administrators to inject malicious scripts. An attacker with high-level privileges can craft a request that, when a user visits a page, executes arbitrary JavaScript in their browser. The vulnerability affects the site's integrity and user data confidentiality.
What an attacker can do
Inject malicious JavaScript that runs in users' browsers when they visit affected pages.
Potential impact on your site
Administrators with malicious intent or compromised admin accounts can steal user data or deface site content.
Conditions required to exploit
Attacker must have high-level admin privileges and trick a user into visiting a crafted link or page.
Key dates
External resources
Related vulnerabilities
