This vulnerability in the reneade SensitiveTagCloud plugin is a CSRF issue that enables stored XSS attacks. It affects all versions up to 1.4.1. The CVSS 3.1 score is 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch links are provided, so remediation status is unknown.

Successful exploitation can allow attackers to execute stored XSS via CSRF, potentially leading to unauthorized actions performed in the context of an authenticated user. This can compromise confidentiality, integrity, and availability of the affected system. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens and restricting actions to trusted users. Monitor official channels for updates or patches from the vendor.