This vulnerability in Social Profilr arises from insufficient CSRF protections in the social-profilr-display-social-network-profile functionality, enabling an attacker to execute stored XSS attacks. The issue affects all versions up to 1.0. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without privileges, requires user interaction, and impacts confidentiality, integrity, and availability to a limited extent.

Successful exploitation can allow an attacker to execute stored XSS attacks via CSRF, potentially leading to unauthorized actions performed in the context of an authenticated user. This can compromise user data confidentiality and integrity and may affect application availability. However, no known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or restricting the vulnerable component if possible and apply standard CSRF protections where feasible. Monitor vendor channels for updates.