The lisensee NetInsight Analytics Implementation Plugin up to version 1.0.3 contains a CSRF vulnerability that can result in stored XSS attacks. This vulnerability enables attackers to trick authenticated users into executing unwanted actions, which may lead to injection of malicious scripts stored on the affected system. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low confidentiality, integrity, and availability impacts.

Successful exploitation could allow an attacker to execute stored XSS attacks via CSRF, potentially leading to unauthorized actions performed with the privileges of the victim user. The impact includes partial compromise of confidentiality, integrity, and availability of the affected system. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider implementing CSRF protections such as verifying anti-CSRF tokens and restricting actions to trusted users where possible.