This vulnerability in Knowledge Base – Knowledge Base Maker allows an attacker to exploit CSRF to inject stored XSS payloads. The affected versions are from initial releases through 1.1.8. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. The vulnerability impacts confidentiality, integrity, and availability to a low to moderate extent. No known exploits are reported in the wild, and no vendor patch or advisory is currently provided.

Successful exploitation could allow an attacker to execute stored malicious scripts in the context of authenticated users, potentially leading to session hijacking, data manipulation, or denial of service. The vulnerability affects confidentiality, integrity, and availability at a low to moderate level as per the CVSS vector. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should apply general CSRF mitigations such as enforcing anti-CSRF tokens and validating user requests. Monitoring for suspicious activity related to stored XSS may also be prudent. No official vendor advisory or patch links are currently provided.