The kornelly Translator product versions up to 0.3 are affected by a CSRF vulnerability that enables stored XSS attacks. This means that an attacker can trick a user into submitting unauthorized requests that cause malicious scripts to be stored and executed in the context of the application. The CVSS score of 7.1 reflects a network attack vector with low attack complexity, no privileges required, user interaction required, and impacts confidentiality, integrity, and availability to a limited extent.

Successful exploitation could allow attackers to execute stored malicious scripts within the application, potentially leading to data disclosure, modification, or disruption of service. The vulnerability impacts confidentiality, integrity, and availability at a low level, but the presence of stored XSS increases the risk of persistent client-side attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, users should consider mitigating CSRF risks by implementing standard CSRF protections such as anti-CSRF tokens and validating request origins where possible.