This vulnerability in Eli ELI's Related Posts Footer Links and Widget (<= 1.2.04.20) allows an attacker to exploit a CSRF flaw to inject stored XSS payloads. The CVSS 3.1 score of 7.1 indicates a high severity with network attack vector, low attack complexity, no privileges required, user interaction needed, and scope changed. The impact includes partial loss of confidentiality, integrity, and availability due to stored XSS resulting from the CSRF attack.

Successful exploitation can lead to stored cross-site scripting, allowing attackers to execute malicious scripts in the context of the affected application. This can compromise user data confidentiality, integrity, and availability. The vulnerability requires user interaction but no privileges, making it a significant risk for users of the affected widget versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or removing the affected widget to prevent exploitation. Monitor vendor channels for updates and apply patches promptly once released.