This vulnerability in Dsingh Purge Varnish Cache (<= 2.6) involves a Cross-Site Request Forgery (CSRF) flaw that enables stored cross-site scripting (XSS). The CVSS 3.1 score of 7.1 indicates a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and scope changed. The vulnerability can lead to limited confidentiality, integrity, and availability impacts. No vendor advisory or patch information is available at this time.

Successful exploitation could allow an attacker to execute unauthorized requests on behalf of an authenticated user, leading to stored XSS attacks. This may result in partial disclosure of information, modification of data, and disruption of service. The overall impact is rated high based on CVSS 3.1 scoring but no known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protections such as validating anti-CSRF tokens and restricting access to the purge functionality. Monitor vendor channels for updates and patches.