This vulnerability in the Awesome Shortcodes For Genesis plugin allows an attacker to exploit a CSRF weakness to inject stored XSS payloads. The CVSS score of 7.1 indicates a high impact with network attack vector, low attack complexity, no privileges required, and user interaction needed. Successful exploitation can lead to partial confidentiality, integrity, and availability impacts. The plugin versions up to 1.1.8 are affected. No patch or mitigation details are provided in the available data.

Exploitation of this vulnerability can allow an attacker to perform stored XSS attacks via CSRF, potentially leading to unauthorized actions performed on behalf of authenticated users and execution of malicious scripts. This can compromise user data confidentiality, integrity, and availability to some extent. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling the plugin or restricting access to trusted users only. Monitor vendor channels for updates and apply patches promptly once available.