This vulnerability in rickota Silverlight Video Player allows an attacker to perform CSRF attacks that result in Stored XSS. The affected product versions are up to 1.0. The CVSS vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. The vulnerability impacts confidentiality, integrity, and availability to a limited extent. No patch or vendor advisory is currently provided, and no exploits are known.

Successful exploitation could allow an attacker to execute stored cross-site scripting attacks via CSRF, potentially leading to limited compromise of user data, session hijacking, or other client-side impacts. The CVSS score of 7.1 reflects a high severity with impacts on confidentiality, integrity, and availability. However, no active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider mitigating CSRF risks by implementing standard CSRF protections such as anti-CSRF tokens and validating user requests. Avoid interacting with untrusted content in the affected player. Monitor vendor channels for updates.