This vulnerability involves a CSRF flaw in the WP GDPR Cookie Consent plugin by Shahjahan Jewel, which allows an attacker to trick an authenticated user into submitting a forged request. This can result in stored XSS, where malicious scripts are injected and persist in the application. The CVSS score of 7.1 indicates a high impact with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. The affected versions include all versions up to 1.0.0.

Successful exploitation can lead to stored XSS, enabling attackers to execute arbitrary scripts in the context of the victim's browser. This can compromise user data confidentiality, integrity, and availability. The vulnerability requires user interaction but no privileges, making it a significant risk for users of the affected plugin versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the affected plugin to mitigate risk. Monitor the vendor's communications for updates on patches or official mitigations.