This vulnerability in dastan800 Visual Builder (<= 1.2.2) is caused by missing authorization checks that enable reflected XSS attacks. The CVSS 3.1 score is 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction needed, and scope changed. The reflected XSS could allow an attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to limited data disclosure, manipulation, or disruption.

Successful exploitation can lead to reflected XSS attacks that may compromise user session data, alter displayed content, or cause denial of service effects. The impact affects confidentiality, integrity, and availability at a low level but is significant enough to warrant attention due to the high CVSS score.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, users should apply standard XSS mitigations such as input validation and output encoding where possible and limit exposure to untrusted inputs. Monitor vendor communications for updates.