The Chaser324 Featured Posts Scroll plugin suffers from a CSRF vulnerability (CWE-352) that enables an attacker to execute stored XSS attacks by tricking an authenticated user into submitting unauthorized requests. This vulnerability affects all versions up to 1.25. The CVSS 3.1 score of 7.1 indicates a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability can lead to stored XSS, allowing attackers to execute malicious scripts in the context of the affected application. This can compromise user data confidentiality, integrity, and availability. The CSRF nature of the vulnerability means attackers can induce authenticated users to perform unintended actions without their consent.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying request origins and tokens where possible. Monitoring for suspicious activity related to stored XSS attempts is advisable. Avoid interacting with untrusted links or sites that could trigger CSRF attacks against the affected plugin.