The vulnerability identified as CVE-2025-46465 affects John Weissberg's Print Science Designer software through version 1.3.155. It is a Cross-Site Request Forgery (CSRF) vulnerability that enables Stored Cross-Site Scripting (XSS) attacks. The vulnerability allows attackers to trick authenticated users into submitting unauthorized requests, which can result in malicious scripts being stored and executed within the application context. The CVSS 3.1 base score of 7.1 reflects a high severity with network attack vector, low attack complexity, no privileges required, but requiring user interaction and impacting confidentiality, integrity, and availability at a low level.

Successful exploitation of this vulnerability can lead to stored XSS attacks, potentially allowing attackers to execute malicious scripts in the context of authenticated users. This can result in unauthorized actions, data manipulation, or information disclosure. The vulnerability affects confidentiality, integrity, and availability at a low level but can be leveraged to compromise user sessions or perform further attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should apply standard CSRF mitigations such as ensuring anti-CSRF tokens are implemented and validated, and exercising caution with links or requests that could trigger unintended actions. Monitor vendor communications for updates on patches or official fixes.