This vulnerability in karrikas banner-manager enables CSRF attacks that can result in Stored XSS. It affects all versions up to 16.04.19. The CVSS score is 7.1, indicating a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No known exploits in the wild or vendor advisories with patch information are currently available.

Successful exploitation can lead to Stored XSS, which may allow attackers to execute malicious scripts in the context of affected users, potentially compromising confidentiality, integrity, and availability of the system. The vulnerability requires user interaction and can be triggered remotely over the network without authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should consider implementing CSRF protections such as anti-CSRF tokens and validating user requests to mitigate exploitation risk. Monitor official vendor channels for updates.