The Platform.ly Official platform up to version 1.1.3 is affected by a CSRF vulnerability that can lead to stored XSS attacks. This means an attacker could trick an authenticated user into submitting unauthorized requests that result in malicious scripts being stored and executed within the platform. The CVSS score of 7.1 reflects the network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is available to confirm remediation status.

Successful exploitation could allow attackers to execute stored XSS via CSRF, potentially compromising user data confidentiality, integrity, and availability within the Platform.ly Official platform. This could lead to unauthorized actions performed with the privileges of the targeted user. However, no known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted links and consider implementing additional CSRF protections or input validation if possible. Monitor vendor communications for updates on patches or official mitigations.