This vulnerability involves a CSRF issue in the Konami Easter Egg software by Adrian Hanft, which enables stored XSS attacks. The affected versions are from initial release through v0.4. The CVSS vector indicates the attack can be performed remotely over the network with low attack complexity, no privileges required, but requires user interaction. The vulnerability impacts confidentiality, integrity, and availability to a limited extent. No vendor advisory or patch information is available at this time.

Successful exploitation could allow an attacker to execute stored XSS via CSRF, potentially leading to unauthorized actions performed in the context of an authenticated user. This can result in partial compromise of user data confidentiality, integrity, and availability. However, there are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with untrusted content and avoid interacting with suspicious links that could trigger CSRF attacks. Monitor official sources for updates regarding patches or mitigations.