This vulnerability in Database to Excel allows an attacker to exploit CSRF to execute stored XSS attacks. The CVSS vector indicates the attack can be performed remotely over the network without privileges, requiring user interaction, and results in a scope change with low confidentiality, integrity, and availability impacts. The vulnerability affects all versions up to and including 1.0. There is no indication of known exploits in the wild or available patches at this time.

Successful exploitation could allow an attacker to execute stored XSS via CSRF, potentially leading to unauthorized actions performed in the context of an authenticated user. This can compromise user data confidentiality and integrity and affect application availability to a limited extent. The vulnerability is rated high severity due to the combination of attack vector and impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens and input sanitization to mitigate stored XSS risks. Monitoring for suspicious activity related to CSRF and XSS attempts is recommended.