This vulnerability in Hieu Nguyen's WATI Chat and Notification product (versions up to 1.1.2) allows an attacker to exploit a CSRF weakness to inject stored XSS payloads. The CVSS score of 7.1 indicates a high-severity issue with network attack vector, low attack complexity, no privileges required, and user interaction needed. The vulnerability affects confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

Successful exploitation can lead to stored XSS via CSRF, potentially allowing attackers to execute malicious scripts in the context of authenticated users. This can compromise user data confidentiality, integrity, and availability of the affected application. No evidence of active exploitation is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing CSRF protections such as anti-CSRF tokens and input validation to mitigate risk. Monitor official sources for updates.