The Kathleen Malone Find Your Reps application versions up to 1.2 contain a CSRF vulnerability that permits attackers to execute unauthorized requests by exploiting the lack of proper request validation. Additionally, the vulnerability allows Stored XSS, which can lead to persistent script injection affecting users of the application. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but user interaction is necessary. The vulnerability impacts confidentiality, integrity, and availability to a limited extent.

Successful exploitation of this vulnerability could allow attackers to perform actions on behalf of authenticated users without their consent and inject malicious scripts that persist in the application, potentially leading to session hijacking, data manipulation, or denial of service. The impact affects confidentiality, integrity, and availability at a low to medium level as per the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should apply general CSRF mitigations such as implementing anti-CSRF tokens and validating request origins if possible. Avoid interacting with untrusted links or sites that could trigger malicious requests in the context of the vulnerable application.