The vulnerability identified as CVE-2025-31460 is a Cross-Site Request Forgery (CSRF) issue in the OmniLeads Scripts and Tags Manager (versions <= 1.3). Exploitation of this vulnerability can result in stored Cross-Site Scripting (XSS), potentially allowing attackers to execute malicious scripts in the context of the affected application. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. There is no vendor advisory or patch link currently available, and the product is not a cloud service, so remediation depends on vendor updates or user-applied mitigations.

Successful exploitation of this CSRF vulnerability can lead to stored XSS, which may allow attackers to execute arbitrary scripts within the affected application context. This can compromise user data confidentiality, integrity, and availability. The CVSS score of 7.1 indicates a high impact on the system's security posture. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should implement CSRF protections such as validating anti-CSRF tokens and restricting unsafe HTTP methods. Additionally, applying input validation and output encoding can help mitigate stored XSS risks. Monitor vendor channels for updates and apply patches promptly once released.