The vulnerability CVE-2025-39419 in Revision Diet (<= 1.0.1) is a CSRF issue that enables stored XSS attacks. An attacker can trick an authenticated user into submitting a forged request, which the application processes, resulting in malicious script storage. This can compromise confidentiality, integrity, and availability to a limited extent as indicated by the CVSS vector. No known exploits are reported in the wild, and no patch or mitigation guidance is currently provided by the vendor.

Successful exploitation can lead to stored XSS, allowing attackers to execute arbitrary scripts in the context of the victim's browser. This can result in limited confidentiality, integrity, and availability impacts as per the CVSS score. The attack requires user interaction and can be initiated remotely over the network without privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens and input validation to mitigate the risk of stored XSS. Monitor official channels for updates from the vendor regarding patches or official mitigations.