ImmuniWeb security scan found a high risk issue

Could be… We use the app as a shell to connect to our webapp. So if it is not voltbuilder/cordova then it may be the inAppBrowser plugin we are using.