This vulnerability in FraudLabs Pro for WooCommerce (<= 2.22.8) involves CSRF that enables stored XSS attacks. An attacker could exploit this by tricking an authenticated user into submitting a crafted request, resulting in malicious script storage within the application. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. The impact includes partial confidentiality, integrity, and availability loss.

Successful exploitation could allow an attacker to execute stored XSS attacks via CSRF, potentially leading to unauthorized actions within the WooCommerce environment. This may compromise user data confidentiality, integrity, and availability to a limited extent. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling the plugin or limiting its use in sensitive environments. Implementing standard CSRF protections and input sanitization may reduce risk but are not confirmed as sufficient mitigations for this specific issue.