This vulnerability in Sourov Amin Word Freshener (<= 1.3) is a CSRF issue that enables Stored XSS attacks. An attacker can exploit this by tricking an authenticated user into submitting a crafted request, resulting in malicious scripts being stored and executed in the context of the vulnerable application. The CVSS 3.1 score of 7.1 reflects network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability with scope changed.

Successful exploitation may allow attackers to execute stored malicious scripts within the application, potentially leading to data theft, session hijacking, or other unauthorized actions affecting confidentiality, integrity, and availability of the system. The vulnerability requires user interaction but no privileges, making it accessible to remote attackers.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as anti-CSRF tokens and validating user requests. Additionally, monitoring for suspicious activity related to stored XSS attempts is advisable.