The EdwardBock Grid product contains a CSRF vulnerability that enables Stored XSS attacks. This affects all versions through 2.3.1. The vulnerability allows attackers to trick authenticated users into submitting unauthorized requests, which can lead to persistent malicious script injection. The CVSS 3.1 base score of 7.1 reflects the high severity of this issue, with network attack vector and low complexity, but requiring user interaction. No vendor advisory or patch information is currently available.

Successful exploitation of this vulnerability can lead to stored cross-site scripting, potentially allowing attackers to execute arbitrary scripts in the context of the victim's browser. This can result in confidentiality loss, integrity compromise, and availability disruption. Since no known exploits are reported, the actual impact in the wild is not confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens and input validation to mitigate the risk of stored XSS. Monitor official EdwardBock communications for updates.