This vulnerability involves a CSRF flaw in FasterThemes FastBook up to version 1.1, which enables stored XSS attacks. The issue allows an attacker to craft malicious requests that, when executed by a victim user, result in persistent cross-site scripting. The CVSS vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts confidentiality, integrity, and availability at a low to moderate level. No official patch or mitigation details have been provided in the available data.

Successful exploitation could lead to unauthorized actions performed by authenticated users without their consent (CSRF) combined with stored XSS, potentially allowing attackers to execute malicious scripts in the context of the affected application. This can result in data disclosure, manipulation, or disruption of service. The CVSS score of 7.1 reflects a high impact on confidentiality, integrity, and availability, but no known exploits are reported in the wild yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens and input validation to mitigate stored XSS risks. Monitor FasterThemes communications for updates and apply patches promptly once released.