The vulnerability CVE-2024-54410 in eagerterrier SOPA Blackout is a CSRF flaw that enables Stored XSS attacks. It affects all versions up to 1.4 of the SOPA Blackout product. The CVSS 3.1 score of 7.1 indicates a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch links are available, and it is not a cloud service, so remediation status is unknown.

Successful exploitation of this vulnerability could allow an attacker to execute stored cross-site scripting attacks via CSRF, potentially leading to unauthorized actions, data exposure, or manipulation within the affected application. The impact affects confidentiality, integrity, and availability at a low level each, as indicated by the CVSS vector. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as anti-CSRF tokens and input validation to mitigate the risk of stored XSS via CSRF. Monitoring vendor channels for updates is recommended.