This vulnerability in Blighty Explorer (<= 2.3.0) involves CSRF that enables an attacker to inject stored XSS payloads. The CVSS vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. The impact includes partial confidentiality, integrity, and availability loss. No official patch or fix details are available from the vendor or advisory sources.

Successful exploitation can lead to stored XSS attacks, which may allow attackers to execute arbitrary scripts in the context of the victim's browser, potentially leading to session hijacking, data theft, or other malicious actions. The CVSS score of 7.1 reflects high severity with impacts on confidentiality, integrity, and availability. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens and input validation to mitigate the risk of stored XSS via CSRF. Monitor vendor channels for updates and apply patches promptly once released.