The wpwox Footer Flyout Widget up to version 1.1 contains a CSRF vulnerability that enables stored XSS attacks. This vulnerability allows attackers to trick authenticated users into submitting unauthorized requests, which then store malicious scripts in the widget. The CVSS 3.1 base score is 7.1, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to execute stored malicious scripts in the context of the affected site, potentially leading to data theft, session hijacking, or other malicious actions impacting confidentiality, integrity, and availability. The vulnerability affects all versions up to and including 1.1 of the Footer Flyout Widget.

No official patch or remediation guidance is currently available. Users should check the vendor's advisory or official channels for updates and apply patches once released. Until then, consider disabling or removing the vulnerable widget to prevent exploitation.