This vulnerability in intelcaprep Site Table of Contents (versions up to 0.3) involves a CSRF flaw that enables stored XSS attacks. The CVSS 3.1 score of 7.1 reflects network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. The vulnerability allows an attacker to trick an authenticated user into submitting a forged request that results in malicious script storage, potentially compromising user sessions or data.

Successful exploitation can lead to stored XSS, allowing attackers to execute arbitrary scripts in the context of the victim's browser. This can result in partial loss of confidentiality, integrity, and availability of the affected system or user data. The attack requires user interaction but no privileges, and can be launched remotely over the network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, users should apply standard CSRF mitigations such as disabling or restricting use of the vulnerable component, employing web application firewalls, and educating users about phishing risks related to CSRF attacks.