This vulnerability involves a CSRF issue in the Unsafe Mimetypes component of ldrumm, which leads to stored XSS. It affects versions up to and including 0.1.4. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but user interaction is needed. The vulnerability impacts confidentiality, integrity, and availability to a limited extent. No patch or official remediation guidance is currently provided.

Successful exploitation could allow an attacker to execute stored cross-site scripting attacks, potentially leading to unauthorized actions performed on behalf of a user, data disclosure, or disruption of service. The vulnerability affects confidentiality, integrity, and availability at a low level as per the CVSS vector. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider implementing CSRF protections such as anti-CSRF tokens and input validation to mitigate the risk. Monitor official sources for updates regarding fixes or workarounds.