This vulnerability in Alex Furr PDF Creator Lite (<= 1.2) involves CSRF that enables stored XSS attacks. An attacker could trick an authenticated user into submitting a crafted request that results in malicious script storage, affecting confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to execute stored XSS via CSRF, potentially leading to unauthorized actions within the application context. This can compromise user data integrity and availability. The impact is rated high due to the combination of CSRF and stored XSS, but no known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should apply standard CSRF mitigations such as disabling or restricting the use of the affected application, avoiding untrusted links, and implementing web application firewall rules if applicable.